guloader | 4af23250a740fc8e855879c8f0492b8be3613ef015db4347d14885f57e25ee93 | Triage

Sharing

General

Target

4af23250a740fc8e855879c8f0492b8be3613ef015db4347d14885f57e25ee93.exe
Size

894KB
Sample

241006-s5429asakk
MD5

c8c2fa1b682b0bca8ed9de83455e8977
SHA1

ff96ea1f052d0e7745a4fe30bacb8362ea57ba2c
SHA256

4af23250a740fc8e855879c8f0492b8be3613ef015db4347d14885f57e25ee93
SHA512

d692404d369b4755e760599a50078f0240dd3a5af2af5953ad86d00eaa788c812bed59b22f19c1251bdd192a8d81a10c4d10ec9cc6a15b1e7a44bfb51c20c258
SSDEEP

24576:ZFZsHTO9u9XKhrmod1RYTy7OQJs+45oi4:Z3n9i61RYeiQJBGf4

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  4af23250a740fc8e855879c8f0492b8be3613ef015db4347d14885f57e25ee93.exe
- Size
  
  894KB
- MD5
  
  c8c2fa1b682b0bca8ed9de83455e8977
- SHA1
  
  ff96ea1f052d0e7745a4fe30bacb8362ea57ba2c
- SHA256
  
  4af23250a740fc8e855879c8f0492b8be3613ef015db4347d14885f57e25ee93
- SHA512
  
  d692404d369b4755e760599a50078f0240dd3a5af2af5953ad86d00eaa788c812bed59b22f19c1251bdd192a8d81a10c4d10ec9cc6a15b1e7a44bfb51c20c258
- SSDEEP
  
  24576:ZFZsHTO9u9XKhrmod1RYTy7OQJs+45oi4:Z3n9i61RYeiQJBGf4
Score

10^/10

guloader discovery downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  12KB
- MD5
  
  d968cb2b98b83c03a9f02dd9b8df97dc
- SHA1
  
  d784c9b7a92dce58a5038beb62a48ff509e166a0
- SHA256
  
  a4ec98011ef99e595912718c1a1bf1aa67bfc2192575729d42f559d01f67b95c
- SHA512
  
  2ee41dc68f329a1519a8073ece7d746c9f3bf45d8ef3b915deb376af37e26074134af5f83c8af0fe0ab227f0d1acca9f37e5ca7ae37c46c3bcc0331fe5e2b97e
- SSDEEP
  
  192:CVA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:CrR7SrtTv53tdtTgwF4SQbGPX36wJMw
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

guloaderdiscoverydownloader

behavioral2

guloaderdiscoverydownloader

behavioral3

behavioral4