guloader | 4cecdff125e6e1bccd1d23ac44e5a51465179fd197e90acf5d4251804d4b08a3 | Triage

Sharing

General

Target

4cecdff125e6e1bccd1d23ac44e5a51465179fd197e90acf5d4251804d4b08a3.exe
Size

676KB
Sample

240926-bxtg4syhpj
MD5

0915cd03cefe498671482b7e6282c13f
SHA1

30dc8076fd385de137a5d7a6c997da3079db4870
SHA256

4cecdff125e6e1bccd1d23ac44e5a51465179fd197e90acf5d4251804d4b08a3
SHA512

c6822df5f81e84e62089205960afbbe28e263cbf7dad5cfb40330b72dd20bd84c87d8b81d04adbfd46353fd19126684c8d6ba4a8e7a239b16cf8fc09f6d8d25d
SSDEEP

12288:VyHG5S4+9qbkMSWj1NSgzAIXJo5XYlFBohQgaGaQUJhlufF1uma:EHOSfUSItcIXJo1YFohQgaGz+hIfF1uF

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  4cecdff125e6e1bccd1d23ac44e5a51465179fd197e90acf5d4251804d4b08a3.exe
- Size
  
  676KB
- MD5
  
  0915cd03cefe498671482b7e6282c13f
- SHA1
  
  30dc8076fd385de137a5d7a6c997da3079db4870
- SHA256
  
  4cecdff125e6e1bccd1d23ac44e5a51465179fd197e90acf5d4251804d4b08a3
- SHA512
  
  c6822df5f81e84e62089205960afbbe28e263cbf7dad5cfb40330b72dd20bd84c87d8b81d04adbfd46353fd19126684c8d6ba4a8e7a239b16cf8fc09f6d8d25d
- SSDEEP
  
  12288:VyHG5S4+9qbkMSWj1NSgzAIXJo5XYlFBohQgaGaQUJhlufF1uma:EHOSfUSItcIXJo1YFohQgaGz+hIfF1uF
Score

10^/10

guloader discovery downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  cf85183b87314359488b850f9e97a698
- SHA1
  
  6b6c790037eec7ebea4d05590359cb4473f19aea
- SHA256
  
  3b6a5cb2a3c091814fce297c04fb677f72732fb21615102c62a195fdc2e7dfac
- SHA512
  
  fe484b3fc89aeed3a6b71b90b90ea11a787697e56be3077154b6ddc2646850f6c38589ed422ff792e391638a80a778d33f22e891e76b5d65896c6fb4696a2c3b
- SSDEEP
  
  96:3IsUxO9udx4qYp7AJb76BykUbQMtHUOA5Iv+RnsrqeXV+d1g2IW9t2c+cEwF9oug:YVL7ikJb76BQUoUm+RnyXVYO2RvHoug
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

guloaderdiscoverydownloader

behavioral2

behavioral3

behavioral4