Overview

overview

10

Static

static

destinations.xlsx

windows7_x64

10

destinations.xlsx

windows10_x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    destinations.xlsx
  • Size 339KB
  • Sample211014-gakvcagcd9
  • SHA256 c45eacade4845c8cf141724b92d6fd4401d30233b18b17e295d2d7a9a8944c40
  • MD5 SHA1 SHA512
Score
10/10
guloaderdownloader

Malware Config

Targets

    • Target
      destinations.xlsx
    • Size 339KB
    • SHA256 c45eacade4845c8cf141724b92d6fd4401d30233b18b17e295d2d7a9a8944c40
    • MD5 SHA1 SHA512
    Score
    10/10
    guloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks