guloader | 67cd5ddee93dbacd883dca39adcb8b6ddf0bac0552a897bbe3f6fd2b9a2a95e1 | Triage

Sharing

General

Target

67cd5ddee93dbacd883dca39adcb8b6ddf0bac0552a897bbe3f6fd2b9a2a95e1
Size

120KB
Sample

230129-tybykafa6y
MD5

80c02cb0ada5deae7b4a35e70970c695
SHA1

cd95b2d465c7440d31f4621891757fe79c4845f5
SHA256

67cd5ddee93dbacd883dca39adcb8b6ddf0bac0552a897bbe3f6fd2b9a2a95e1
SHA512

e4b648c3a82f2f5a13f9799b77227d8ae37b3f2b93092c0201624e5899b98398038bbd0f086dbafe03e162b3605807ad065f9a84d0a39065708cc1d7363b7f5a
SSDEEP

768:4Tw9OgARqEFupwjuNPu1Ase17Rk4NmNCndsoc8Y0B7z0HoisKrl+ja6JsRpPBRC3:69FBjiP8eNmN/oc8Y0puIX+PfD5aVl

Score

10^/10

guloader downloader guloader

Malware Config

Extracted

Family

guloader

C2

https://21twelveinteractive.com/fg/janomo_wdgrWjlP237.bin

xor.base64

Targets

- Target
  
  67cd5ddee93dbacd883dca39adcb8b6ddf0bac0552a897bbe3f6fd2b9a2a95e1
- Size
  
  120KB
- MD5
  
  80c02cb0ada5deae7b4a35e70970c695
- SHA1
  
  cd95b2d465c7440d31f4621891757fe79c4845f5
- SHA256
  
  67cd5ddee93dbacd883dca39adcb8b6ddf0bac0552a897bbe3f6fd2b9a2a95e1
- SHA512
  
  e4b648c3a82f2f5a13f9799b77227d8ae37b3f2b93092c0201624e5899b98398038bbd0f086dbafe03e162b3605807ad065f9a84d0a39065708cc1d7363b7f5a
- SSDEEP
  
  768:4Tw9OgARqEFupwjuNPu1Ase17Rk4NmNCndsoc8Y0B7z0HoisKrl+ja6JsRpPBRC3:69FBjiP8eNmN/oc8Y0puIX+PfD5aVl
Score

10^/10

guloader downloader guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Guloader payload
  guloader
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

guloaderdownloaderguloader

behavioral2

guloaderdownloaderguloader