guloader | 8a45d901cab57a1b65c32aea2452f56436dcf01c37bdf7875838e6054f395d90 | Triage

Analysis

max time kernel
148s
max time network
150s
platform
windows7_x64
resource
win7v20210408
submitted
14-10-2021 06:27

Sharing

Report Analysis Logs

General

Target

8777020a37b6797241a489a707b9784b.exe
Size

204KB
MD5

8777020a37b6797241a489a707b9784b
SHA1

a1ed1029b967295f9ce5e9d219f41dc6c7fc4d1a
SHA256

8a45d901cab57a1b65c32aea2452f56436dcf01c37bdf7875838e6054f395d90
SHA512

0a9d13ca582dd72b4cdce8c91a5226aeb8c70ac7a73fa5f9775c6d03753bf7ec856371f55bf5f5e38f0a1d84e375c80916e5508f89d91e7100a82c4e544174d8

Score

10^/10

guloader downloader

Malware Config

Signatures

Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
downloader guloader
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

8777020a37b6797241a489a707b9784b.exe

pid process

1348 8777020a37b6797241a489a707b9784b.exe

C:\Users\Admin\AppData\Local\Temp\8777020a37b6797241a489a707b9784b.exe
"C:\Users\Admin\AppData\Local\Temp\8777020a37b6797241a489a707b9784b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1348

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1348-60-0x0000000000220000-0x0000000000226000-memory.dmp

Filesize
24KB

Download
memory/1348-61-0x0000000000220000-0x000000000022A000-memory.dmp

Filesize
40KB

Download
memory/1348-62-0x0000000000280000-0x00000000002AC000-memory.dmp

Filesize
176KB

Download