Overview

overview

10

Static

static

3

Jailkeeper.exe

windows7-x64

10

Jailkeeper.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Jackhead/k...ls.scr

windows7-x64

Jackhead/k...ls.scr

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67f175e8da6a4a4a521b457be91e35a9021059db411573070d0a2ae0c9b48355.img

  • Size

    1.4MB

  • Sample

    240628-btawlatclf

  • MD5

    0b26858829fcb7c0b9d791fadcaf5981

  • SHA1

    9f16e0ac9851a9901a699bdb9f7115ebe42614d5

  • SHA256

    67f175e8da6a4a4a521b457be91e35a9021059db411573070d0a2ae0c9b48355

  • SHA512

    4cd1dee7424b4b80f2bf200cabb5abce3459e9377f620a5c215a7843861d1cb36e1017dae2626ba5cf08bac0101101612122a2a2c3cb12e10f5253b15e251bef

  • SSDEEP

    24576:+cIjUna3iVPF+zgyKKht6APjMtiVBsRXR:fbF50httQb

Score
10/10
guloaderdownloader

Malware Config

Targets

    • Target

      Jailkeeper.bat

    • Size

      858KB

    • MD5

      c7eefc30a9cdc5bab3269cefde2d221e

    • SHA1

      27914bc81bdc74d9607784d9e239f5437b1e8cb1

    • SHA256

      2a089fc9b24c5253a913526be0ac2ee62b911a96645cb70885d678c91dcb83c9

    • SHA512

      fce33213726f84946162e2c115f67dc4dbfe60af9ca6b6ceb75d576f9370abc98ed0309acf617a2c6f34ffc023632ce1b32391716190980aceb4af84dce3798c

    • SSDEEP

      24576:XcIjUna3iVPF+zgyKKht6APjMtiVBsRXRU:kbF50httQbi

    Score
    10/10
    guloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      55a26d7800446f1373056064c64c3ce8

    • SHA1

      80256857e9a0a9c8897923b717f3435295a76002

    • SHA256

      904fd5481d72f4e03b01a455f848dedd095d0fb17e33608e0d849f5196fb6ff8

    • SHA512

      04b8ab7a85c26f188c0a06f524488d6f2ac2884bf107c860c82e94ae12c3859f825133d78338fd2b594dfc48f7dc9888ae76fee786c6252a5c77c88755128a5b

    • SSDEEP

      192:MPtkumJX7zBE2kGwfy9S9VkPsFQ1Mx1c:97O2k5q9wA1Mxa

    Score
    3/10
    behavioral3behavioral4

    • Target

      Jackhead/keelhauls.scr

    • Size

      1.0MB

    • MD5

      87a3ce82a211e6022d7145c99eef5edc

    • SHA1

      d2aa5daef3272acdee40657353ebb0ba94728e8d

    • SHA256

      66bf6c84307739696eb18d632b6a34755375e61f3c612dc273c7f8f25fcad938

    • SHA512

      66f2bc1530f6d187749486c7305f069d67964ef5427a6a59f2dc081469f5d608c6e0d2c30edef70a6a79e6386be1528ae2b8725ba704e2d3cf8b2f303d8eb1cf

    • SSDEEP

      768:N9lotXK6U6HA/zmsIxzvraRwfj+iMbmwrhg2hnwjYBm2GOP9bsWZafCJL6Ir7wxG:QRPMLzJ

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Matrix ATT&CK v13

Tasks