Overview

overview

10

Static

static

1

df148634d4...f9.exe

windows7-x64

10

df148634d4...f9.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df148634d4c1283169e14cdf73cd66c217c4259eb24cdc4aa94e834d5373ccf9

  • Size

    613KB

  • Sample

    230206-q47qmshd7v

  • MD5

    598006943c00897342521805a95ca553

  • SHA1

    ff0d0e310dcff0011161515c504df7d49dbeba7b

  • SHA256

    df148634d4c1283169e14cdf73cd66c217c4259eb24cdc4aa94e834d5373ccf9

  • SHA512

    efa3006bde7ce0f05cf9bf11ee5beb700b2a9539d532b883906606db18c6a72e1fe9c7e414f41c76f54a17aa0a78350fd4ee93ff6fc0387bb24769a235a9a499

  • SSDEEP

    6144:VGYgXWlQw/LOvqf+fNu8HQc4o97VsAHWUt0TNBpt8OGM8eow6oW8TWBa2T4Wrdc9:ADGz0I+M8J52U0NuMrs748dX2

Score
10/10
guloaderdownloader

Malware Config

Targets

    • Target

      df148634d4c1283169e14cdf73cd66c217c4259eb24cdc4aa94e834d5373ccf9

    • Size

      613KB

    • MD5

      598006943c00897342521805a95ca553

    • SHA1

      ff0d0e310dcff0011161515c504df7d49dbeba7b

    • SHA256

      df148634d4c1283169e14cdf73cd66c217c4259eb24cdc4aa94e834d5373ccf9

    • SHA512

      efa3006bde7ce0f05cf9bf11ee5beb700b2a9539d532b883906606db18c6a72e1fe9c7e414f41c76f54a17aa0a78350fd4ee93ff6fc0387bb24769a235a9a499

    • SSDEEP

      6144:VGYgXWlQw/LOvqf+fNu8HQc4o97VsAHWUt0TNBpt8OGM8eow6oW8TWBa2T4Wrdc9:ADGz0I+M8J52U0NuMrs748dX2

    Score
    10/10
    guloaderdownloader

    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

      downloaderguloader

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks