guloader | 6b0132113d71e94f827ae1e92c0ebe1e37517686c394b226f88ea8093afd18b8 | Triage

Sharing

General

Target

6b0132113d71e94f827ae1e92c0ebe1e37517686c394b226f88ea8093afd18b8.exe
Size

657KB
Sample

241009-kw8eba1gmq
MD5

7ec1521d2e72494307e4b54a5e96bc76
SHA1

0c87b286ab368dbe6ef746840e9e69ced7bdf568
SHA256

6b0132113d71e94f827ae1e92c0ebe1e37517686c394b226f88ea8093afd18b8
SHA512

ca1a05aef72c06f86b7f0a3da233f0c8315e29d471a1460414a985fa936caec1f7e5ae7f7196a67289aaae75aa3db08129285813b83ab91329e6964f20a8e3c2
SSDEEP

12288:lyHHeM8WrL7tShhYWCxtoBOVg7tCVtWTSYQYaGPmcaOadF1umV34:UH+CL7I0VtSOVgCYaGPsF1umV34

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  6b0132113d71e94f827ae1e92c0ebe1e37517686c394b226f88ea8093afd18b8.exe
- Size
  
  657KB
- MD5
  
  7ec1521d2e72494307e4b54a5e96bc76
- SHA1
  
  0c87b286ab368dbe6ef746840e9e69ced7bdf568
- SHA256
  
  6b0132113d71e94f827ae1e92c0ebe1e37517686c394b226f88ea8093afd18b8
- SHA512
  
  ca1a05aef72c06f86b7f0a3da233f0c8315e29d471a1460414a985fa936caec1f7e5ae7f7196a67289aaae75aa3db08129285813b83ab91329e6964f20a8e3c2
- SSDEEP
  
  12288:lyHHeM8WrL7tShhYWCxtoBOVg7tCVtWTSYQYaGPmcaOadF1umV34:UH+CL7I0VtSOVgCYaGPsF1umV34
Score

10^/10

guloader discovery downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  cf85183b87314359488b850f9e97a698
- SHA1
  
  6b6c790037eec7ebea4d05590359cb4473f19aea
- SHA256
  
  3b6a5cb2a3c091814fce297c04fb677f72732fb21615102c62a195fdc2e7dfac
- SHA512
  
  fe484b3fc89aeed3a6b71b90b90ea11a787697e56be3077154b6ddc2646850f6c38589ed422ff792e391638a80a778d33f22e891e76b5d65896c6fb4696a2c3b
- SSDEEP
  
  96:3IsUxO9udx4qYp7AJb76BykUbQMtHUOA5Iv+RnsrqeXV+d1g2IW9t2c+cEwF9oug:YVL7ikJb76BQUoUm+RnyXVYO2RvHoug
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

guloaderdiscoverydownloader

behavioral2

behavioral3

behavioral4