Triage | Malware sandboxing report by Hatching Triage

Sharing

General

Target

0d490a0762558277e2b385a209a367e2c5bd623bc286ccd319fe5f481278a1a2
Size

108KB
Sample

230129-1t6qpsfg8y
MD5

86e4fff2aef9acf356a23d65e2fbbd83
SHA1

3bec3ff34e9f4517837a24ad8a74bf3604d9c2b0
SHA256

0d490a0762558277e2b385a209a367e2c5bd623bc286ccd319fe5f481278a1a2
SHA512

72e7b48bdf958d9ad712106876472de68496021e35499e7fd441a2bac93339c9b801b5541871360a75b8fbda1740f1a989f27145dff5853d80c1805e4f39fffd
SSDEEP

1536:mKiagmcJUSQ/rHATKqlH174wQnKVk7/a+/zbzDMOwZ++sP0aC:mSc+glH174TTa+rPAOVP0B

Score

10^/10

guloader downloader

Malware Config

Extracted

Family

guloader

C2

https://onedrive.live.com/download?cid=1EF46D95820B4241&resid=1EF46D95820B4241%21134&authkey=AK0tHk81sryKxcQ

xor.base64

Targets

- Target
  
  0d490a0762558277e2b385a209a367e2c5bd623bc286ccd319fe5f481278a1a2
- Size
  
  108KB
- MD5
  
  86e4fff2aef9acf356a23d65e2fbbd83
- SHA1
  
  3bec3ff34e9f4517837a24ad8a74bf3604d9c2b0
- SHA256
  
  0d490a0762558277e2b385a209a367e2c5bd623bc286ccd319fe5f481278a1a2
- SHA512
  
  72e7b48bdf958d9ad712106876472de68496021e35499e7fd441a2bac93339c9b801b5541871360a75b8fbda1740f1a989f27145dff5853d80c1805e4f39fffd
- SSDEEP
  
  1536:mKiagmcJUSQ/rHATKqlH174wQnKVk7/a+/zbzDMOwZ++sP0aC:mSc+glH174TTa+rPAOVP0B
Score

10^/10

guloader downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

guloaderdownloader

behavioral2

guloaderdownloader