guloader | 2f13f6e9fee8ddc78cf064f255b4885dbf51f69b029648e21a2f24973467fc19 | Triage

Analysis

max time kernel
16s
max time network
125s
platform
windows10_x64
resource
win10v20210410
submitted
25-07-2021 23:28

Sharing

Report Analysis Logs

General

Target

23-07-2021/RICHIESTA DI OFFERTA.exe
Size

236KB
MD5

73bb5c4b690b8d6df88d6bc18fb3a553
SHA1

60adddd91b6038fc9d819cf6d647ce3be0b11d38
SHA256

a3feb5265e6d02710f04ff618e966e9da9ba8fc8dc5692d6f7633fe0a3037b66
SHA512

9c023dc66d9bcfb2f5bc0274001d92948ac058fc8765d2178907dfd8fb9885ede57acc3836d583ad97516dce1a97c50f081800b41a1f42ea938efb8b23e87567

Score

10^/10

guloader downloader

Malware Config

Signatures

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

RICHIESTA DI OFFERTA.exe

pid process

4444 RICHIESTA DI OFFERTA.exe

C:\Users\Admin\AppData\Local\Temp\23-07-2021\RICHIESTA DI OFFERTA.exe
"C:\Users\Admin\AppData\Local\Temp\23-07-2021\RICHIESTA DI OFFERTA.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4444

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4444-116-0x0000000002F00000-0x0000000002F13000-memory.dmp

Filesize
76KB

Download