guloader | 840fd4cc08c108fa4d9805c2a703ddb5171416396ef0494a51b30dba9c98b462 | Triage

Sharing

General

Target

JaffaCakes118_0ff721b909eaf72b2bef9109295ba823
Size

120KB
Sample

250106-fps9lawrft
MD5

0ff721b909eaf72b2bef9109295ba823
SHA1

055f287e4db8f2db0e0cb908a824df5a58f94e61
SHA256

840fd4cc08c108fa4d9805c2a703ddb5171416396ef0494a51b30dba9c98b462
SHA512

3aa7a43d4a49c9132014d504a52f9e94ff35f85984ada8e9184f34fe117b9ae39b8a0b03796519453687f58aa0af761190503f842074c8c6f12afc07710b78f9
SSDEEP

1536:yie6Nvq6ke7v5BnUq5mkm34M2NUj67EOIeGTpPj5ZKmhLB5:ze65ke7RBP8kA964OMTlrP/

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_0ff721b909eaf72b2bef9109295ba823
- Size
  
  120KB
- MD5
  
  0ff721b909eaf72b2bef9109295ba823
- SHA1
  
  055f287e4db8f2db0e0cb908a824df5a58f94e61
- SHA256
  
  840fd4cc08c108fa4d9805c2a703ddb5171416396ef0494a51b30dba9c98b462
- SHA512
  
  3aa7a43d4a49c9132014d504a52f9e94ff35f85984ada8e9184f34fe117b9ae39b8a0b03796519453687f58aa0af761190503f842074c8c6f12afc07710b78f9
- SSDEEP
  
  1536:yie6Nvq6ke7v5BnUq5mkm34M2NUj67EOIeGTpPj5ZKmhLB5:ze65ke7RBP8kA964OMTlrP/
Score

10^/10

guloader discovery downloader
- Guloader family
  guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

guloaderdiscoverydownloader

behavioral2

guloaderdiscoverydownloader