guloader | 9d4fef68cea3a9741e7ec17df630c91ec8be60764c9794dbf4c0c0b15c72866b | Triage

Sharing

General

Target

9d4fef68cea3a9741e7ec17df630c91ec8be60764c9794dbf4c0c0b15c72866b
Size

64KB
Sample

230129-1t86tsfg9s
MD5

50fcbd0927ae25c74e818cf3a2e39abd
SHA1

13652b28506e98577505a34ef21e8ef0073d0ad1
SHA256

9d4fef68cea3a9741e7ec17df630c91ec8be60764c9794dbf4c0c0b15c72866b
SHA512

4cabfaf9ef0155e435fd4f9fdf4471810eb635d17fd7aa2fb5a899978c42e9603b30126fe9b1aadde5c192ab477db590c33d59fdf624217455561891f06547f9
SSDEEP

768:hX76pMOAudWfklC3wbiypeqPGS4pLP4pexKWkRRVXlcxE9qms:B70P1DjeqL4uexngRVpA

Score

10^/10

guloader downloader

Malware Config

Extracted

Family

guloader

C2

https://cagno-di.com/wp-admin/bin_lUQUaSkho34.bin

http://103.141.138.118/bin_lUQUaSkho34.bin

xor.base64

Targets

- Target
  
  9d4fef68cea3a9741e7ec17df630c91ec8be60764c9794dbf4c0c0b15c72866b
- Size
  
  64KB
- MD5
  
  50fcbd0927ae25c74e818cf3a2e39abd
- SHA1
  
  13652b28506e98577505a34ef21e8ef0073d0ad1
- SHA256
  
  9d4fef68cea3a9741e7ec17df630c91ec8be60764c9794dbf4c0c0b15c72866b
- SHA512
  
  4cabfaf9ef0155e435fd4f9fdf4471810eb635d17fd7aa2fb5a899978c42e9603b30126fe9b1aadde5c192ab477db590c33d59fdf624217455561891f06547f9
- SSDEEP
  
  768:hX76pMOAudWfklC3wbiypeqPGS4pLP4pexKWkRRVXlcxE9qms:B70P1DjeqL4uexngRVpA
Score

10^/10

guloader downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

guloaderdownloader

behavioral2

guloaderdownloader