Overview

overview

10

Static

static

1

bad.exe

windows7-x64

10

bad.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bad.exe

  • Size

    464KB

  • Sample

    230109-nkr5qsea44

  • MD5

    42e54a95324d960cca2714a28ef18273

  • SHA1

    929a266dac911e8d599969382576de63c92bcffa

  • SHA256

    79b2d2dac60bc4cff17458bf09dd010ecd39075dc5962105c534ae66fc643d1b

  • SHA512

    d05bad79aaedbc581f1e4a7489209885bf4219ec1da4ae00f5beb9f88f421d852c9414e0a1f6dc5a04cd8b583ebbe3534d83bc48493178f55155d5e207b85eef

  • SSDEEP

    6144:lY2xUcRNOoxj+z1Ne/rJTgAPZHpfAQJ20O3m5sZtoSFJaRG/cuuYfNKL5TjDTcgW:55OCjkGNTgAPIQg53jaRG0kf45TjDTcj

Score
10/10
guloaderdownloader

Malware Config

Targets

    • Target

      bad.exe

    • Size

      464KB

    • MD5

      42e54a95324d960cca2714a28ef18273

    • SHA1

      929a266dac911e8d599969382576de63c92bcffa

    • SHA256

      79b2d2dac60bc4cff17458bf09dd010ecd39075dc5962105c534ae66fc643d1b

    • SHA512

      d05bad79aaedbc581f1e4a7489209885bf4219ec1da4ae00f5beb9f88f421d852c9414e0a1f6dc5a04cd8b583ebbe3534d83bc48493178f55155d5e207b85eef

    • SSDEEP

      6144:lY2xUcRNOoxj+z1Ne/rJTgAPZHpfAQJ20O3m5sZtoSFJaRG/cuuYfNKL5TjDTcgW:55OCjkGNTgAPIQg53jaRG0kf45TjDTcj

    Score
    10/10
    guloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks