guloader | 7920878337664465adb0254c8135d74c8337cc0a77e6e2aa05c893e76c7f2fb6 | Triage

Sharing

General

Target

JaffaCakes118_f8813d632dfd45f8e903eb6282b732cd
Size

116KB
Sample

250111-gcpw3swrg1
MD5

f8813d632dfd45f8e903eb6282b732cd
SHA1

b194ee53ef9a10636d46f9567d47b052f448bd77
SHA256

7920878337664465adb0254c8135d74c8337cc0a77e6e2aa05c893e76c7f2fb6
SHA512

a473fa6322822391439c036e28a5b4b46e72d055d1fe0c7a3e000afc8865a83b5ac21585eb16b5e0ed6ce48c7880d2debb3d4699bfcb0100231ef5e45af22291
SSDEEP

3072:jn9pppppppupppppppppppfppppppppppAppppppppFpppppppppYpppppp3pppq:hpppppppupppppppppppfppppppppppW

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  JaffaCakes118_f8813d632dfd45f8e903eb6282b732cd
- Size
  
  116KB
- MD5
  
  f8813d632dfd45f8e903eb6282b732cd
- SHA1
  
  b194ee53ef9a10636d46f9567d47b052f448bd77
- SHA256
  
  7920878337664465adb0254c8135d74c8337cc0a77e6e2aa05c893e76c7f2fb6
- SHA512
  
  a473fa6322822391439c036e28a5b4b46e72d055d1fe0c7a3e000afc8865a83b5ac21585eb16b5e0ed6ce48c7880d2debb3d4699bfcb0100231ef5e45af22291
- SSDEEP
  
  3072:jn9pppppppupppppppppppfppppppppppAppppppppFpppppppppYpppppp3pppq:hpppppppupppppppppppfppppppppppW
Score

10^/10

guloader discovery downloader
- Guloader family
  guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

guloaderdiscoverydownloader

behavioral2

guloaderdiscoverydownloader