Overview

overview

10

Static

static

NEW ORDER ...0-1.js

windows7_x64

10

NEW ORDER ...0-1.js

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEW ORDER LE 102920-1.js

  • Size

    1.4MB

  • Sample

    210416-6gh3kamsya

  • MD5

    6609872d415547f78e7b30d06bdefd7c

  • SHA1

    7640ee4b15e9613cba555c0528492b5ae78fd7e7

  • SHA256

    b42c6b4dd02bc3542a96fffe21c0ab2ae21ddba4fef035a681b5a454607f6e92

  • SHA512

    91fbdc623b1f2d6fe39e5344d835a0887c543057f69b004f7fe187dbf917c5ee736da0650616ca104e1c5c96f5519ce4e2ddcb91a90a134c8ac31bf743de882a

Score
10/10
guloaderdownloaderguloader

Malware Config

Targets

    • Target

      NEW ORDER LE 102920-1.js

    • Size

      1.4MB

    • MD5

      6609872d415547f78e7b30d06bdefd7c

    • SHA1

      7640ee4b15e9613cba555c0528492b5ae78fd7e7

    • SHA256

      b42c6b4dd02bc3542a96fffe21c0ab2ae21ddba4fef035a681b5a454607f6e92

    • SHA512

      91fbdc623b1f2d6fe39e5344d835a0887c543057f69b004f7fe187dbf917c5ee736da0650616ca104e1c5c96f5519ce4e2ddcb91a90a134c8ac31bf743de882a

    Score
    10/10
    guloaderdownloaderguloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Guloader Payload

      guloader

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks