guloader | 2f13f6e9fee8ddc78cf064f255b4885dbf51f69b029648e21a2f24973467fc19 | Triage

Analysis

max time kernel
17s
max time network
125s
platform
windows10_x64
resource
win10v20210410
submitted
25-07-2021 23:28

Sharing

Report Analysis Logs

General

Target

23-07-2021/PREVENTIVO RICHIESTO (2).exe
Size

236KB
MD5

72d9c62e4483519df1303fe0c46d16aa
SHA1

12093edc01bcf89eb7a9758d1392592fb273de35
SHA256

42c8ded976a7c9f295888220d4d2fc273535f1fa15e6e25cfceaf454188f7895
SHA512

cf6d6c1a6072c022ab4d19f098715cba02f8dcc74f01ce7ad735d5cdb5c7505aeb9c98fb9ff3faac7932ffbdb7cdf581c583fa846cc76b71dee3f2a71b7b30a0

Score

10^/10

guloader downloader

Malware Config

Signatures

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

PREVENTIVO RICHIESTO (2).exe

pid process

4432 PREVENTIVO RICHIESTO (2).exe

C:\Users\Admin\AppData\Local\Temp\23-07-2021\PREVENTIVO RICHIESTO (2).exe
"C:\Users\Admin\AppData\Local\Temp\23-07-2021\PREVENTIVO RICHIESTO (2).exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4432

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4432-116-0x00000000020B0000-0x00000000020C3000-memory.dmp

Filesize
76KB

Download