guloader | 476e1edbf802d57c9c64291dc1d9c05a7e6b1186c02c3d1115696cdb1bab1cd0

General

Target

4ba8df31e6bbf697d7c47542d7d528d0N.exe
Size

356KB
Sample

240814-g3dxhasgkp
MD5

4ba8df31e6bbf697d7c47542d7d528d0
SHA1

2053f5b0352e8beeb754a993810d95ed2c87e9c2
SHA256

476e1edbf802d57c9c64291dc1d9c05a7e6b1186c02c3d1115696cdb1bab1cd0
SHA512

06a71a1d3bce66352f8c189afc5486bd5fa65b4f999d6152a36596fb487e585451476bf853218360b1609eebacab68c003e75858fc2a6154a658e3a34f3047c2
SSDEEP

6144:opSPrmVxkvgcX+jnfspFoAHj0iTnNTaiYupoZVv5wwFNLgwxn+GhsEA+86:lCVxHcX6neoAHjzTNGiYupovPFNL9EGT

Score

10^/10

Malware Config

Targets

- Target
  
  4ba8df31e6bbf697d7c47542d7d528d0N.exe
- Size
  
  356KB
- MD5
  
  4ba8df31e6bbf697d7c47542d7d528d0
- SHA1
  
  2053f5b0352e8beeb754a993810d95ed2c87e9c2
- SHA256
  
  476e1edbf802d57c9c64291dc1d9c05a7e6b1186c02c3d1115696cdb1bab1cd0
- SHA512
  
  06a71a1d3bce66352f8c189afc5486bd5fa65b4f999d6152a36596fb487e585451476bf853218360b1609eebacab68c003e75858fc2a6154a658e3a34f3047c2
- SSDEEP
  
  6144:opSPrmVxkvgcX+jnfspFoAHj0iTnNTaiYupoZVv5wwFNLgwxn+GhsEA+86:lCVxHcX6neoAHjzTNGiYupovPFNL9EGT
Score

10^/10

guloader lokibot collection credential_access discovery downloader spyware stealer trojan
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Lokibot
  Lokibot is a Password and CryptoCoin Wallet Stealer.
  trojan spyware stealer lokibot
- Credentials from Password Stores: Credentials from Web Browsers
  Malicious Access or copy of Web Browser Credential store.
  credential_access stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Accesses Microsoft Outlook profiles
  collection
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  3f176d1ee13b0d7d6bd92e1c7a0b9bae
- SHA1
  
  fe582246792774c2c9dd15639ffa0aca90d6fd0b
- SHA256
  
  fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e
- SHA512
  
  0a69124819b7568d0dea4e9e85ce8fe61c7ba697c934e3a95e2dcfb9f252b1d9da7faf8774b6e8efd614885507acc94987733eba09a2f5e7098b774dfc8524b6
- SSDEEP
  
  192:OPtkumJX7zB22kGwfy0mtVgkCPOsX1un:/702k5qpdsXQn
Score

3^/10

discovery
behavioral3 behavioral4