guloader | 45cbf383e2dfe4a89644db5c65b6951322718be77f73271bbba7156eecfb6559

Analysis

Score

10^/10

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader

Guloader Payload 1 IoCs

guloader

Processes:

resource	yara_rule
behavioral2/memory/492-4-0x0000000002090000-0x000000000209B000-memory.dmp	family_guloader

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

N_PEDIDO_356479.exe

pid process

492 N_PEDIDO_356479.exe

pid	process
492	N_PEDIDO_356479.exe

C:\Users\Admin\AppData\Local\Temp\N_PEDIDO_356479.exe
"C:\Users\Admin\AppData\Local\Temp\N_PEDIDO_356479.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:492

memory/492-4-0x0000000002090000-0x000000000209B000-memory.dmp

Filesize
44KB

Download