guloader | 9c20d2a4e22acfdf30c9b3cc30e5d5988454ac2eabaedfd4cbbc3b9bb5abdf27 | Triage

Analysis

max time kernel
118s
max time network
156s
platform
windows7_x64
resource
win7v20210410
submitted
23-07-2021 21:40

Sharing

Report Analysis Logs

General

Target

39c45d4a889a779508af596c63b5c5fb.exe
Size

184KB
MD5

39c45d4a889a779508af596c63b5c5fb
SHA1

0a32dd3811b8caf29d53fd046bb605ad501a0448
SHA256

9c20d2a4e22acfdf30c9b3cc30e5d5988454ac2eabaedfd4cbbc3b9bb5abdf27
SHA512

0896226baccdc05973c80873faf2454dd6d88fd2e48695b020be9b8c20e0d5e151e09fa5a8dc2278334de28dee318addb74bd56b7f95692fa9d49243df54e243

Score

10^/10

guloader downloader

Malware Config

Signatures

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

39c45d4a889a779508af596c63b5c5fb.exe

pid process

1664 39c45d4a889a779508af596c63b5c5fb.exe

C:\Users\Admin\AppData\Local\Temp\39c45d4a889a779508af596c63b5c5fb.exe
"C:\Users\Admin\AppData\Local\Temp\39c45d4a889a779508af596c63b5c5fb.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1664

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1664-61-0x0000000000250000-0x0000000000279000-memory.dmp

Filesize
164KB

Download