guloader | 228af33d89b12c800e3b35c56f138f438eea433e8234dcb94d891c4cbc781515 | Triage

Analysis

max time kernel
23s
max time network
135s
platform
windows10_x64
resource
win10v20210410
submitted
27-07-2021 09:00

Sharing

Report Analysis Logs

General

Target

e4857a851dea1d94107503f5e19e7e5387943d07.exe
Size

220KB
MD5

9c663c32354cab851127438643611ada
SHA1

e4857a851dea1d94107503f5e19e7e5387943d07
SHA256

228af33d89b12c800e3b35c56f138f438eea433e8234dcb94d891c4cbc781515
SHA512

5cab43a0f14036f39b0f1f6397476d8e8c2563c667161292a12b0611bee8041628aee96f13119216aa64f72fbd01dc22ca4e0ece792616a675d06db5970188f4

Score

10^/10

guloader downloader

Malware Config

Signatures

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

e4857a851dea1d94107503f5e19e7e5387943d07.exe

pid process

4068 e4857a851dea1d94107503f5e19e7e5387943d07.exe

C:\Users\Admin\AppData\Local\Temp\e4857a851dea1d94107503f5e19e7e5387943d07.exe
"C:\Users\Admin\AppData\Local\Temp\e4857a851dea1d94107503f5e19e7e5387943d07.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4068

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4068-116-0x0000000002200000-0x0000000002213000-memory.dmp

Filesize
76KB

Download