guloader | 4d54c4ef2b4817fdcfc6554f331c9ba3725cfa52d394d2570c0e01731a96173c | Triage

Analysis

max time kernel
123s
max time network
159s
platform
windows7_x64
resource
win7v20210408
submitted
27-07-2021 16:29

Sharing

Report Analysis Logs

General

Target

INVOICE_098766MK09.exe
Size

176KB
MD5

18adb5d6508eb1c6585b57ac5ab654bd
SHA1

48e01b8e4455d8d03ec890c182b583b4b093743e
SHA256

4d54c4ef2b4817fdcfc6554f331c9ba3725cfa52d394d2570c0e01731a96173c
SHA512

68a65bc74e3a07140326fb7d0621376f93c94bd1370a50ae5e3d11d31a6280b6b527900ff9f313e09d68c7912bb089ea3b52a2372d4553b0bc56aa406ac1581c

Score

10^/10

guloader downloader

Malware Config

Signatures

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

INVOICE_098766MK09.exe

pid process

1832 INVOICE_098766MK09.exe

C:\Users\Admin\AppData\Local\Temp\INVOICE_098766MK09.exe
"C:\Users\Admin\AppData\Local\Temp\INVOICE_098766MK09.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1832

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1832-61-0x00000000022B0000-0x00000000022C7000-memory.dmp

Filesize
92KB

Download