guloader | 665b8dea01643cce577cc8cc6cc1677e78cbf4559b7c0fbd0446dee65970b4ea

General

Target
665b8dea01643cce577cc8cc6cc1677e78cbf4559b7c0fbd0446dee65970b4ea.exe
Size 551KB
Sample240312-c832csfh89
SHA256 665b8dea01643cce577cc8cc6cc1677e78cbf4559b7c0fbd0446dee65970b4ea
MD5 341dab4037e9eff3fa0f34fb8382f30c
SHA1 9833559bcda07e6976364672f6b7c8bcef84571f
SHA512 bd0d81ddde528f9987f749f9789d6a32300c7eef5d98593c4fc708d0352d0c8828982482894bd8ac9e768e320f4ba5fede2ecd8937a461dadad4015be2940f3d
SSDEEP 6144:ImOP0pJkkuNjE241F13gyLWoz6XVasKvGSz7tvIPykUn5CRFaPyCoUtU7Hi8R55i:pkNE2cL3rKou+vGEZvx5CD1W4i83bWL
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  665b8dea01643cce577cc8cc6cc1677e78cbf4559b7c0fbd0446dee65970b4ea.exe
- Size 551KB
- SHA256 665b8dea01643cce577cc8cc6cc1677e78cbf4559b7c0fbd0446dee65970b4ea
- MD5 341dab4037e9eff3fa0f34fb8382f30c
- SHA1 9833559bcda07e6976364672f6b7c8bcef84571f
- SHA512 bd0d81ddde528f9987f749f9789d6a32300c7eef5d98593c4fc708d0352d0c8828982482894bd8ac9e768e320f4ba5fede2ecd8937a461dadad4015be2940f3d
- SSDEEP 6144:ImOP0pJkkuNjE241F13gyLWoz6XVasKvGSz7tvIPykUn5CRFaPyCoUtU7Hi8R55i:pkNE2cL3rKou+vGEZvx5CD1W4i83bWL
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

guloader lokibot collection downloader spyware stealer trojan
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448
- MD5 9625d5b1754bc4ff29281d415d27a0fd
- SHA1 80e85afc5cccd4c0a3775edbb90595a1a59f5ce0
- SHA512 dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b
- SSDEEP 192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4