guloader | 952c1bc7773c529d609f5eac3d5268274cec23eb495ca6ce78a866a73f96aa24 | Triage

Analysis

max time kernel
12s
max time network
118s
platform
windows10_x64
resource
win10v20210410
submitted
27-07-2021 16:13

Sharing

Report Analysis Logs

General

Target

098d627a93cd7687f54c4bd1c342e00d.exe
Size

265KB
MD5

098d627a93cd7687f54c4bd1c342e00d
SHA1

dadf67b338f8223d06312da5d8d4a338dde816f3
SHA256

952c1bc7773c529d609f5eac3d5268274cec23eb495ca6ce78a866a73f96aa24
SHA512

55f3d13dd56cf5c2950d4075624d1c9a708c01bdf2227f61bef977d30673a65902b32c223e7b7a99a8275e2fdd9557d44c04e747d3ef0fe008edf972d1494377

Score

10^/10

guloader downloader

Malware Config

Signatures

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

098d627a93cd7687f54c4bd1c342e00d.exe

pid process

3692 098d627a93cd7687f54c4bd1c342e00d.exe

C:\Users\Admin\AppData\Local\Temp\098d627a93cd7687f54c4bd1c342e00d.exe
"C:\Users\Admin\AppData\Local\Temp\098d627a93cd7687f54c4bd1c342e00d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3692

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3692-116-0x00000000021E0000-0x00000000021EE000-memory.dmp

Filesize
56KB

Download