guloader | f75cefc70404640cf823fe419af6f9841c3cfee17a9fdbe332da251d0964e17f | Triage

Sharing

General

Target

f75cefc70404640cf823fe419af6f9841c3cfee17a9fdbe332da251d0964e17f
Size

123KB
Sample

221229-hzc2gace59
MD5

ca12931ef2bc25a747d2586e8e199f65
SHA1

799394f1f0cc8b19c38f4ad6272d9b732f51e60e
SHA256

f75cefc70404640cf823fe419af6f9841c3cfee17a9fdbe332da251d0964e17f
SHA512

daf8d9da424972116152f15710310b1b26fdbdb29e8f7514982bf2d5585fc856771742d525eced4422a8667eddbd9f360b066610b6e753045f53c8380b604134
SSDEEP

1536:FKQ1kslYluZNA03kyNYzF9AtbSF/DwJQAXR8GYpX5JcogiVvKaj7/yuJNUoBqZTr:FER0gAg9FsewJEk3dP6e8A

Score

10^/10

guloader downloader

Malware Config

Targets

- Target
  
  f75cefc70404640cf823fe419af6f9841c3cfee17a9fdbe332da251d0964e17f
- Size
  
  123KB
- MD5
  
  ca12931ef2bc25a747d2586e8e199f65
- SHA1
  
  799394f1f0cc8b19c38f4ad6272d9b732f51e60e
- SHA256
  
  f75cefc70404640cf823fe419af6f9841c3cfee17a9fdbe332da251d0964e17f
- SHA512
  
  daf8d9da424972116152f15710310b1b26fdbdb29e8f7514982bf2d5585fc856771742d525eced4422a8667eddbd9f360b066610b6e753045f53c8380b604134
- SSDEEP
  
  1536:FKQ1kslYluZNA03kyNYzF9AtbSF/DwJQAXR8GYpX5JcogiVvKaj7/yuJNUoBqZTr:FER0gAg9FsewJEk3dP6e8A
Score

10^/10

guloader downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

guloaderdownloader

behavioral2