guloader | 7361937ed6b026b71ec86d1a5e0019d3a7c5cc0abc1ee68ed34bf923734ec273 | Triage

Sharing

General

Target

68842779c6b45654e5ab5b603f350b22_JaffaCakes118
Size

100KB
Sample

241022-c4vjestfpl
MD5

68842779c6b45654e5ab5b603f350b22
SHA1

588c9ae5df21303ed28481dc8e39b2431c698718
SHA256

7361937ed6b026b71ec86d1a5e0019d3a7c5cc0abc1ee68ed34bf923734ec273
SHA512

e2503c00148d2db50fa0ad87d4fc16cbbff3a0146e148551bd5dad0dc83ff4d5fb7f23e148ef7c4e696a5568163c62e4a9df92e9654810d60f21390f1db60b7e
SSDEEP

3072:XbOoqEXmPwVwdqOD5lEQmxA/x1M/QoGi:XbDhXmPwVwYOD5lEHxA/xm/Qo

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  68842779c6b45654e5ab5b603f350b22_JaffaCakes118
- Size
  
  100KB
- MD5
  
  68842779c6b45654e5ab5b603f350b22
- SHA1
  
  588c9ae5df21303ed28481dc8e39b2431c698718
- SHA256
  
  7361937ed6b026b71ec86d1a5e0019d3a7c5cc0abc1ee68ed34bf923734ec273
- SHA512
  
  e2503c00148d2db50fa0ad87d4fc16cbbff3a0146e148551bd5dad0dc83ff4d5fb7f23e148ef7c4e696a5568163c62e4a9df92e9654810d60f21390f1db60b7e
- SSDEEP
  
  3072:XbOoqEXmPwVwdqOD5lEQmxA/x1M/QoGi:XbDhXmPwVwYOD5lEHxA/xm/Qo
Score

10^/10

guloader discovery downloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

guloaderdiscoverydownloader

behavioral2

guloaderdiscoverydownloader