guloader | c3de4c29fb60d61906dded355c1e2ae3eae47d36df007a15f974cc8febdd802e | Triage

Sharing

General

Target

c3de4c29fb60d61906dded355c1e2ae3eae47d36df007a15f974cc8febdd802e
Size

84KB
Sample

221130-xv1djafh78
MD5

a00b3fc463937ae6aebab3fd0c13b054
SHA1

ff66d3bbcf7b4d8c797e1296f7a0cdb806cba7c0
SHA256

c3de4c29fb60d61906dded355c1e2ae3eae47d36df007a15f974cc8febdd802e
SHA512

d60daaf37353ee0dbc9a88871fd7a50df7fac1cce5a574f73998d14031dbf0c5324217ff17c83f7f68f42bf2e8b0e14aba59fce10c52fde5555b593eee2b2e9e
SSDEEP

1536:zHnOD6VRu0B6TsujMY+hnfMb0mnzNnd2d:zHnODRTskj+hnfeNRnd2d

Score

10^/10

guloader downloader

Malware Config

Extracted

Family

guloader

C2

https://onedrive.live.com/download?cid=1D0AA158DE95C6F6&resid=1D0AA158DE95C6F6%21175&authkey=AEmn-H6Yc07-aR4

https://cdn.discordapp.com/attachments/810770375788462113/810770466456207390/bin_JEqkajc155.bin

xor.base64

Targets

- Target
  
  c3de4c29fb60d61906dded355c1e2ae3eae47d36df007a15f974cc8febdd802e
- Size
  
  84KB
- MD5
  
  a00b3fc463937ae6aebab3fd0c13b054
- SHA1
  
  ff66d3bbcf7b4d8c797e1296f7a0cdb806cba7c0
- SHA256
  
  c3de4c29fb60d61906dded355c1e2ae3eae47d36df007a15f974cc8febdd802e
- SHA512
  
  d60daaf37353ee0dbc9a88871fd7a50df7fac1cce5a574f73998d14031dbf0c5324217ff17c83f7f68f42bf2e8b0e14aba59fce10c52fde5555b593eee2b2e9e
- SSDEEP
  
  1536:zHnOD6VRu0B6TsujMY+hnfMb0mnzNnd2d:zHnODRTskj+hnfeNRnd2d
Score

10^/10

guloader downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

guloaderdownloader

behavioral2

guloaderdownloader