guloader | 9c2d1e2dc9170158a8fef8393fd58306f918ceb15701465c4e21040be94233c2 | Triage

Sharing

General

Target

9c2d1e2dc9170158a8fef8393fd58306f918ceb15701465c4e21040be94233c2.exe
Size

617KB
Sample

241009-hqtb4a1dlj
MD5

6d3da95a3e1f5861a54c30dd61f80c02
SHA1

74e6fb42c2de33b6b9dcd45aa86db1b99c8c2135
SHA256

9c2d1e2dc9170158a8fef8393fd58306f918ceb15701465c4e21040be94233c2
SHA512

70c23ed78a8d369c78073504d6bc4b5fd1ee89e7708318706d4c4108e2d2257381634b12326d546eb51c76fefc0d98cf7863c4ac6bc7857dfe46217ce4a87302
SSDEEP

6144:YYa6vEsNe5YZ0thEQftDn2IeudqgiYxOJ2Hd2Wn49rVzOpb4o4/aZJZCrXmxhz3f:YY+T5LbtDOgiYQQ9tUVm4d2d5c737+

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  9c2d1e2dc9170158a8fef8393fd58306f918ceb15701465c4e21040be94233c2.exe
- Size
  
  617KB
- MD5
  
  6d3da95a3e1f5861a54c30dd61f80c02
- SHA1
  
  74e6fb42c2de33b6b9dcd45aa86db1b99c8c2135
- SHA256
  
  9c2d1e2dc9170158a8fef8393fd58306f918ceb15701465c4e21040be94233c2
- SHA512
  
  70c23ed78a8d369c78073504d6bc4b5fd1ee89e7708318706d4c4108e2d2257381634b12326d546eb51c76fefc0d98cf7863c4ac6bc7857dfe46217ce4a87302
- SSDEEP
  
  6144:YYa6vEsNe5YZ0thEQftDn2IeudqgiYxOJ2Hd2Wn49rVzOpb4o4/aZJZCrXmxhz3f:YY+T5LbtDOgiYQQ9tUVm4d2d5c737+
Score

10^/10

discovery guloader downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  12KB
- MD5
  
  cff85c549d536f651d4fb8387f1976f2
- SHA1
  
  d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA256
  
  8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- SHA512
  
  531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP
  
  192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

guloaderdiscoverydownloader

behavioral3

behavioral4