guloader | 261f3949bd50d1d7dc83918e59f453d159215ca018a3f1a8b063f3f0ea0c3ab9 | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.GenericKD.37144681.29205.872.exe
Size

164KB
Sample

221109-beyn4scff5
MD5

b531b4e3705c6c0ab46244b566faa49e
SHA1

3b9d4eec4306c796df2657657fb45e37df3e8f9d
SHA256

261f3949bd50d1d7dc83918e59f453d159215ca018a3f1a8b063f3f0ea0c3ab9
SHA512

a1f0b454470bfe2508799cb7e2fe93ff22d83f1ba5073f54efbd3911e58da692e93a70917c0dfac51a81dc7f29fa0b9b867cd7a071d6fc40463fcea6f54121e0
SSDEEP

3072:JlaBzj4gF1ST8z8UmLstdwzEFTwcw4BWnoXTYKwO4K:Jlatj4gEUmLsLggMcw4BWneTYc

Score

10^/10

guloader downloader

Malware Config

Extracted

Family

guloader

C2

https://www.jardinimperial.cl/media/Lime-Client_KyuGXeM63.bin

Targets

- Target
  
  SecuriteInfo.com.Trojan.GenericKD.37144681.29205.872.exe
- Size
  
  164KB
- MD5
  
  b531b4e3705c6c0ab46244b566faa49e
- SHA1
  
  3b9d4eec4306c796df2657657fb45e37df3e8f9d
- SHA256
  
  261f3949bd50d1d7dc83918e59f453d159215ca018a3f1a8b063f3f0ea0c3ab9
- SHA512
  
  a1f0b454470bfe2508799cb7e2fe93ff22d83f1ba5073f54efbd3911e58da692e93a70917c0dfac51a81dc7f29fa0b9b867cd7a071d6fc40463fcea6f54121e0
- SSDEEP
  
  3072:JlaBzj4gF1ST8z8UmLstdwzEFTwcw4BWnoXTYKwO4K:Jlatj4gEUmLsLggMcw4BWneTYc
Score

10^/10

guloader downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

guloaderdownloader

behavioral2