guloader | 8c902fc0f78ef5ae8375f02f7b48020972ea2b22fb2eb01398ac2517074ccc52 | Triage

Sharing

General

Target

WireTransferInvoicePaymentRef89507.exe
Size

532KB
Sample

240930-vhrjrazdpd
MD5

861734e77cbfd9b0663419e053b8f100
SHA1

b7f908d8cf86cc9e20a51d9020d2b6860c8e4433
SHA256

8c902fc0f78ef5ae8375f02f7b48020972ea2b22fb2eb01398ac2517074ccc52
SHA512

0467e62b8781748d49ed33595fc15e8ef0ff4a01e62ed111838158f1cfeb3a55007573e8b36e38606d00359038dc1d4ca3fb71ba9816a9e6ab31e53884c67ce1
SSDEEP

12288:zBbNp7y7wNaoecSRZfiRYiWvCwr5ym2FV:9y7wgBcSDKi9qW5y

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  WireTransferInvoicePaymentRef89507.exe
- Size
  
  532KB
- MD5
  
  861734e77cbfd9b0663419e053b8f100
- SHA1
  
  b7f908d8cf86cc9e20a51d9020d2b6860c8e4433
- SHA256
  
  8c902fc0f78ef5ae8375f02f7b48020972ea2b22fb2eb01398ac2517074ccc52
- SHA512
  
  0467e62b8781748d49ed33595fc15e8ef0ff4a01e62ed111838158f1cfeb3a55007573e8b36e38606d00359038dc1d4ca3fb71ba9816a9e6ab31e53884c67ce1
- SSDEEP
  
  12288:zBbNp7y7wNaoecSRZfiRYiWvCwr5ym2FV:9y7wgBcSDKi9qW5y
Score

10^/10

guloader discovery downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  ee260c45e97b62a5e42f17460d406068
- SHA1
  
  df35f6300a03c4d3d3bd69752574426296b78695
- SHA256
  
  e94a1f7bcd7e0d532b660d0af468eb3321536c3efdca265e61f9ec174b1aef27
- SHA512
  
  a98f350d17c9057f33e5847462a87d59cbf2aaeda7f6299b0d49bb455e484ce4660c12d2eb8c4a0d21df523e729222bbd6c820bf25b081bc7478152515b414b3
- SSDEEP
  
  192:eF24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol9Sl:h8QIl975eXqlWBrz7YLOl9
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

guloaderdiscoverydownloader

behavioral2

guloaderdiscoverydownloader

behavioral3

behavioral4