General

  • Target

    65816f0ec95d4d9bc5f962ea94fb244a870607a989acbdbbbd84dd525ded63f2

  • Size

    64KB

  • MD5

    256b869e5affcc4f55a16348467d8f55

  • SHA1

    05a31b0f7ec22942bc4c41ca79f4b741cf88770f

  • SHA256

    65816f0ec95d4d9bc5f962ea94fb244a870607a989acbdbbbd84dd525ded63f2

  • SHA512

    c85445dc85aeb745ef73b0a1f6432e0de9e8b5e81d85ec575a8dc8fbe762be56012a5553a4b96a8f27c642e1aa555e0fa46f865419025607c594a00d10d18506

  • SSDEEP

    768:EJyv/QudG0GnMUbtpZpXBWOnnKSqu3XAKIc3:EAv4udWLVlBtIEXADi

Score
10/10

Malware Config

Extracted

Family

guloader

C2

https://onedrive.live.com/download?cid=1550143AA6F30C4B&resid=1550143AA6F30C4B%21111&authkey=AGgC6wX6Aua_0vk

xor.base64

Signatures

  • Guloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 65816f0ec95d4d9bc5f962ea94fb244a870607a989acbdbbbd84dd525ded63f2
    .exe windows x86

    c1cedb27582df92e9be66cf91ed1d0aa


    Headers

    Imports

    Sections