guloader | f628892bb58c2a70ced55a594a3efe1e56bca6f5bd911c8626aeda8faaa9917b | Triage

Sharing

General

Target

f628892bb58c2a70ced55a594a3efe1e56bca6f5bd911c8626aeda8faaa9917b
Size

60KB
Sample

230129-srqmpscb93
MD5

6aa1fdfe4bd9fcd1f3fce87946a70278
SHA1

9ffe1ebc54a380492d1cc1bfd9d3b4702fa0b925
SHA256

f628892bb58c2a70ced55a594a3efe1e56bca6f5bd911c8626aeda8faaa9917b
SHA512

5a1e6328a22dc6ca0593f82ae299ed1632d1ab90bfdcb7f9e5785896b3859ed8f04cec1ca06d054e689dbecaa63e26e7bcbc18bd10a407b847f06da1b07fb9c6
SSDEEP

768:xPk1ugYvPp74t4Ey0YWV/S4wqkT2NSM4e3Grlq4zkiCfBo/80rpoZHkjNmEWg/1:Z3/Zct4vWUHMYrM4zlCpo/pVkV

Score

10^/10

guloader downloader

Malware Config

Extracted

Family

guloader

C2

https://cervmp.cl/dstu_qnXdbri105.bin

xor.base64

Targets

- Target
  
  f628892bb58c2a70ced55a594a3efe1e56bca6f5bd911c8626aeda8faaa9917b
- Size
  
  60KB
- MD5
  
  6aa1fdfe4bd9fcd1f3fce87946a70278
- SHA1
  
  9ffe1ebc54a380492d1cc1bfd9d3b4702fa0b925
- SHA256
  
  f628892bb58c2a70ced55a594a3efe1e56bca6f5bd911c8626aeda8faaa9917b
- SHA512
  
  5a1e6328a22dc6ca0593f82ae299ed1632d1ab90bfdcb7f9e5785896b3859ed8f04cec1ca06d054e689dbecaa63e26e7bcbc18bd10a407b847f06da1b07fb9c6
- SSDEEP
  
  768:xPk1ugYvPp74t4Ey0YWV/S4wqkT2NSM4e3Grlq4zkiCfBo/80rpoZHkjNmEWg/1:Z3/Zct4vWUHMYrM4zlCpo/pVkV
Score

10^/10

guloader downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

guloaderdownloader

behavioral2

guloaderdownloader