Overview

overview

10

Static

static

d1650c8ba8...79.exe

windows7-x64

10

d1650c8ba8...79.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1650c8ba87bb2b1938eb6e5d9a14fa43f1897ed566d21c473a69778960d8e79

  • Size

    72KB

  • Sample

    230129-v971tafg79

  • MD5

    8daca3fcbece201be9631385a1a05cdd

  • SHA1

    b22c9effa83ef2727848a14b34dac3abeb07f059

  • SHA256

    d1650c8ba87bb2b1938eb6e5d9a14fa43f1897ed566d21c473a69778960d8e79

  • SHA512

    13364d4044fdd7ad8690bc5a8ef9dc493d02dced6f50909260dfd97e0fb08f4482456e43a520729ded62e99ba2213d3ac121caf58199e9d00974058c15fb837e

  • SSDEEP

    1536:V2DVvJF6xnrMClmWokoLtnjMiCIY52IHD:V2ZvJF6HsWokoLtnjrCIsHH

Score
10/10
guloaderdownloaderguloader

Malware Config

Extracted

Family

guloader

C2

https://drive.google.com/uc?export=download&id=1lbp4Nqg2LZqJJb1BC6cI2NjWIY2vAJjy

xor.base64

Targets

    • Target

      d1650c8ba87bb2b1938eb6e5d9a14fa43f1897ed566d21c473a69778960d8e79

    • Size

      72KB

    • MD5

      8daca3fcbece201be9631385a1a05cdd

    • SHA1

      b22c9effa83ef2727848a14b34dac3abeb07f059

    • SHA256

      d1650c8ba87bb2b1938eb6e5d9a14fa43f1897ed566d21c473a69778960d8e79

    • SHA512

      13364d4044fdd7ad8690bc5a8ef9dc493d02dced6f50909260dfd97e0fb08f4482456e43a520729ded62e99ba2213d3ac121caf58199e9d00974058c15fb837e

    • SSDEEP

      1536:V2DVvJF6xnrMClmWokoLtnjMiCIY52IHD:V2ZvJF6HsWokoLtnjrCIsHH

    Score
    10/10
    guloaderdownloaderguloader
    behavioral1behavioral2

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation

                          Tasks