guloader | c1f1c9aa77b5b5fc59c2ded5ae0ffc6f5b9afe7232bcc251059542318fc0d0cd | Triage

Sharing

General

Target

JaffaCakes118_2ff72f4cb74792c45a2d27a01acca264
Size

584KB
Sample

241231-xjy2bstnfz
MD5

2ff72f4cb74792c45a2d27a01acca264
SHA1

0307f4339a197318c0b6d4105b7db87691ff4708
SHA256

c1f1c9aa77b5b5fc59c2ded5ae0ffc6f5b9afe7232bcc251059542318fc0d0cd
SHA512

65bcc4d659e2a699a8b337c52fb64ba937baa70674526b260fe4684736324ad092880274c8866c7c104dfc068fc3906da795a1c21ce927ec13cc75c4bb00a8d4
SSDEEP

12288:hEYDoAU/U3AVE2gNrY9iH8+1YMfZlAAeG7a42f:2YkAU/6AVE2Urp8+1dZV90f

Score

10^/10

guloader remcos discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_2ff72f4cb74792c45a2d27a01acca264
- Size
  
  584KB
- MD5
  
  2ff72f4cb74792c45a2d27a01acca264
- SHA1
  
  0307f4339a197318c0b6d4105b7db87691ff4708
- SHA256
  
  c1f1c9aa77b5b5fc59c2ded5ae0ffc6f5b9afe7232bcc251059542318fc0d0cd
- SHA512
  
  65bcc4d659e2a699a8b337c52fb64ba937baa70674526b260fe4684736324ad092880274c8866c7c104dfc068fc3906da795a1c21ce927ec13cc75c4bb00a8d4
- SSDEEP
  
  12288:hEYDoAU/U3AVE2gNrY9iH8+1YMfZlAAeG7a42f:2YkAU/6AVE2Urp8+1dZV90f
Score

10^/10

guloader discovery downloader
- Guloader family
  guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

guloaderdiscoverydownloader

behavioral2

guloaderdiscoverydownloader