General
- Target jaffacakes118_11128246201_tecnicas_exe.zip
- Size 341KB
- Sample260917-wtbs4shd45
- SHA256 fa3b4f8b82c089055c0ce19175e11526d7af7ec8e010034a9e8b406012a4fd18
Score
10/10
Malware Config
Targets
-
- Target 0ab6668c4bc57f654f1b09af524dd2313ecf7900f347e0c0b2d5b9f8e07eb6d6
- Size 372KB
- SHA256 0ab6668c4bc57f654f1b09af524dd2313ecf7900f347e0c0b2d5b9f8e07eb6d6
Score10/10-
Family: Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory
-
- Target $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 bd046e6497b304e4ea4ab102cab2b1f94ce09bde0eebba4c59942a732679e4eb
Score3/10 -
- Target Dyrepark/Hypothesist/System.Diagnostics.TraceSource.dll
- Size 130KB
- SHA256 1268992f73b4cababad60132ffd0e5b263be1fcefa3424682122ea30c782215a
Score1/10