guloader | 45cbf383e2dfe4a89644db5c65b6951322718be77f73271bbba7156eecfb6559

Analysis

Score

10^/10

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader

Guloader Payload 1 IoCs

guloader

Processes:

resource	yara_rule
behavioral1/memory/384-4-0x0000000001D10000-0x0000000001D1B000-memory.dmp	family_guloader

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

N_PEDIDO_356479.exe

pid process

384 N_PEDIDO_356479.exe

pid	process
384	N_PEDIDO_356479.exe

C:\Users\Admin\AppData\Local\Temp\N_PEDIDO_356479.exe
"C:\Users\Admin\AppData\Local\Temp\N_PEDIDO_356479.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:384

memory/384-4-0x0000000001D10000-0x0000000001D1B000-memory.dmp

Filesize
44KB

Download