guloader | db9ba4ed720606aa9b538172c70b30ec75f6a11ffa869bfa5d90505c11fb272d | Triage

Sharing

General

Target

db9ba4ed720606aa9b538172c70b30ec75f6a11ffa869bfa5d90505c11fb272d
Size

172KB
Sample

221130-t4abxsag3t
MD5

44faa7312e7be4783d9bde23dd564c67
SHA1

30b3aafcc5bef855ff06b9fbda069d198c4d2b96
SHA256

db9ba4ed720606aa9b538172c70b30ec75f6a11ffa869bfa5d90505c11fb272d
SHA512

b5ee3ad95c2dcdfbc74618a3b14e1eb51c5d9737a394c3e580f519262a78d4a39f386102867df5b6c86f085b5ff2b64a3a2013607705d3b26167eb0bed19815c
SSDEEP

3072:0KVO27wv+MhKNGNykPQea/nJ181UMthWJtUeqdOkAJNe4:9I27+hKNGNykPQea/nJ181UMthUUeqd9

Score

10^/10

guloader downloader guloader

Malware Config

Extracted

Family

guloader

C2

https://onedrive.live.com/download?cid=26BBD7D5AD88DD29&resid=26BBD7D5AD88DD29%21112&authkey=AP5Ew4-I3UywOQI

xor.base64

Targets

- Target
  
  db9ba4ed720606aa9b538172c70b30ec75f6a11ffa869bfa5d90505c11fb272d
- Size
  
  172KB
- MD5
  
  44faa7312e7be4783d9bde23dd564c67
- SHA1
  
  30b3aafcc5bef855ff06b9fbda069d198c4d2b96
- SHA256
  
  db9ba4ed720606aa9b538172c70b30ec75f6a11ffa869bfa5d90505c11fb272d
- SHA512
  
  b5ee3ad95c2dcdfbc74618a3b14e1eb51c5d9737a394c3e580f519262a78d4a39f386102867df5b6c86f085b5ff2b64a3a2013607705d3b26167eb0bed19815c
- SSDEEP
  
  3072:0KVO27wv+MhKNGNykPQea/nJ181UMthWJtUeqdOkAJNe4:9I27+hKNGNykPQea/nJ181UMthUUeqd9
Score

10^/10

guloader downloader guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Guloader payload
  guloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

guloaderdownloaderguloader

behavioral2

guloaderdownloaderguloader