guloader | 5fcc58948623192102c69e2d46c7bfa2256eb76e23a9e5b2543990ffa032d0cf | Triage

Analysis

max time kernel
286s
max time network
288s
platform
windows7_x64
resource
win7v20210408
submitted
23-07-2021 13:34

Sharing

Report Analysis Logs

General

Target

73dcabcebb4370aa66b91438294ad61fd316f3f7.exe
Size

184KB
MD5

30cd538734fa25507f9d54f58c708e9b
SHA1

0257d5982325239425ced2c6a326c101ba8f366f
SHA256

5fcc58948623192102c69e2d46c7bfa2256eb76e23a9e5b2543990ffa032d0cf
SHA512

dcf80274934192902af520e76eecc40d646a7aad7f543be2e11026ac79e2c4a7d31ccc0402ae391c234e2f7c04156bc053a3dfe74846d492cfb18e168caf46fe

Score

10^/10

guloader downloader

Malware Config

Signatures

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

73dcabcebb4370aa66b91438294ad61fd316f3f7.exe

pid process

784 73dcabcebb4370aa66b91438294ad61fd316f3f7.exe

C:\Users\Admin\AppData\Local\Temp\73dcabcebb4370aa66b91438294ad61fd316f3f7.exe
"C:\Users\Admin\AppData\Local\Temp\73dcabcebb4370aa66b91438294ad61fd316f3f7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:784

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/784-62-0x0000000001D00000-0x0000000001D29000-memory.dmp

Filesize
164KB

Download