guloader | 87f853045075ff0f1b1153b5288f640772415e9474fb3c6d5fccf7fe0c74b541 | Triage

Sharing

General

Target

JaffaCakes118_18163c8489e59f376f16bca9bd9b4408
Size

136KB
Sample

250106-jzsycstlfn
MD5

18163c8489e59f376f16bca9bd9b4408
SHA1

d76aa2d74e428fabd30f0663ff1efaf3b673c2f6
SHA256

87f853045075ff0f1b1153b5288f640772415e9474fb3c6d5fccf7fe0c74b541
SHA512

48048621cd9d063bac278b6ccc0611f7fa46b40d90437cc42030f163edd73edbf933bbe151f641b7cd8f4cbe11aee0b2513a570209a28c45acab89c12c5575b3
SSDEEP

1536:tP3DBSk/Um43S7JLXIoZBork1btXi6GJsF38+sZsPMW7XshspFTIdDB:tP1unS7JLYoZh1btXiNsJ8TapIjd1

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_18163c8489e59f376f16bca9bd9b4408
- Size
  
  136KB
- MD5
  
  18163c8489e59f376f16bca9bd9b4408
- SHA1
  
  d76aa2d74e428fabd30f0663ff1efaf3b673c2f6
- SHA256
  
  87f853045075ff0f1b1153b5288f640772415e9474fb3c6d5fccf7fe0c74b541
- SHA512
  
  48048621cd9d063bac278b6ccc0611f7fa46b40d90437cc42030f163edd73edbf933bbe151f641b7cd8f4cbe11aee0b2513a570209a28c45acab89c12c5575b3
- SSDEEP
  
  1536:tP3DBSk/Um43S7JLXIoZBork1btXi6GJsF38+sZsPMW7XshspFTIdDB:tP1unS7JLYoZh1btXiNsJ8TapIjd1
Score

10^/10

guloader discovery downloader
- Guloader family
  guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

guloaderdiscoverydownloader

behavioral2

guloaderdiscoverydownloader