guloader | 1630900cea6650e9e879f9c4f287e40732869f0cdf9fd80cf4ed5728994f1c37 | Triage

Sharing

General

Target

1630900cea6650e9e879f9c4f287e40732869f0cdf9fd80cf4ed5728994f1c37
Size

104KB
Sample

221125-k24y3saf6v
MD5

7fccf073ee2c95219d4b42b1a1db4571
SHA1

a7ec2400d59a3a70c4be1ace9b451fcb89d89b9c
SHA256

1630900cea6650e9e879f9c4f287e40732869f0cdf9fd80cf4ed5728994f1c37
SHA512

b660616f0e169906e36b164cf51b67e48f58b01ca535f6e7741f6ffc65e8c64950443a43d70f9d70614b81b3d31f3b8c5309c1957bcab502023e36603ad2dc05
SSDEEP

768:ZlyHdo1RWk1S1x4/b/tU85CLwai2V+i2QTHhd0a2k0+3Jo6dOdG8vpft+IwtRD7u:6Hd0RdS1ItrUBiJi2AAacPdBGjPmt

Score

10^/10

guloader downloader guloader

Malware Config

Extracted

Family

guloader

C2

http://votelund.com/kl/newjan_pJWiW187.bin

xor.base64

Targets

- Target
  
  1630900cea6650e9e879f9c4f287e40732869f0cdf9fd80cf4ed5728994f1c37
- Size
  
  104KB
- MD5
  
  7fccf073ee2c95219d4b42b1a1db4571
- SHA1
  
  a7ec2400d59a3a70c4be1ace9b451fcb89d89b9c
- SHA256
  
  1630900cea6650e9e879f9c4f287e40732869f0cdf9fd80cf4ed5728994f1c37
- SHA512
  
  b660616f0e169906e36b164cf51b67e48f58b01ca535f6e7741f6ffc65e8c64950443a43d70f9d70614b81b3d31f3b8c5309c1957bcab502023e36603ad2dc05
- SSDEEP
  
  768:ZlyHdo1RWk1S1x4/b/tU85CLwai2V+i2QTHhd0a2k0+3Jo6dOdG8vpft+IwtRD7u:6Hd0RdS1ItrUBiJi2AAacPdBGjPmt
Score

10^/10

guloader downloader guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Guloader payload
  guloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

guloaderdownloaderguloader

behavioral2

guloaderdownloaderguloader