guloader | 457920271c702327ebd0b91221bab5c4c953f09a7b2a32166ebb266ff5d7bf13 | Triage

Sharing

General

Target

457920271c702327ebd0b91221bab5c4c953f09a7b2a32166ebb266ff5d7bf13.exe
Size

707KB
Sample

241119-v4y6qazbqm
MD5

eaeb565ce0d6ae206e483e41494076c1
SHA1

d7fa7da74017ab6f376d13a87203115be32d373c
SHA256

457920271c702327ebd0b91221bab5c4c953f09a7b2a32166ebb266ff5d7bf13
SHA512

280360bb5d860051a7c9c7c9f432358d6d401aca2780acb835bb76a792ecbdda9df36051dd6f9d0990159c0090c079a3565ec19920ea0361fec95c6367939554
SSDEEP

12288:d35ol8MJEBhQRtZZbhhLSbWJgU8UFJ6UibZP9/I7TAWWtQnmD:d3kJEBORt7b3Oa2Udi9P9yTB0QnmD

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  457920271c702327ebd0b91221bab5c4c953f09a7b2a32166ebb266ff5d7bf13.exe
- Size
  
  707KB
- MD5
  
  eaeb565ce0d6ae206e483e41494076c1
- SHA1
  
  d7fa7da74017ab6f376d13a87203115be32d373c
- SHA256
  
  457920271c702327ebd0b91221bab5c4c953f09a7b2a32166ebb266ff5d7bf13
- SHA512
  
  280360bb5d860051a7c9c7c9f432358d6d401aca2780acb835bb76a792ecbdda9df36051dd6f9d0990159c0090c079a3565ec19920ea0361fec95c6367939554
- SSDEEP
  
  12288:d35ol8MJEBhQRtZZbhhLSbWJgU8UFJ6UibZP9/I7TAWWtQnmD:d3kJEBORt7b3Oa2Udi9P9yTB0QnmD
Score

10^/10

discovery guloader downloader
- Guloader family
  guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  75ed96254fbf894e42058062b4b4f0d1
- SHA1
  
  996503f1383b49021eb3427bc28d13b5bbd11977
- SHA256
  
  a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
- SHA512
  
  58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
- SSDEEP
  
  192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

guloaderdiscoverydownloader

behavioral3

behavioral4