guloader | c0b66b41d0206b4e2f3eaff9ff3920a0b312d87482430315a00b47dca50af751

General

Target

file.exe
Size

859KB
Sample

250206-tjqhea1qdm
MD5

0c905584bc842c087f5b9a927b34d178
SHA1

1320741a3c09793b9b1044b3f3096ec289e3c2ea
SHA256

c0b66b41d0206b4e2f3eaff9ff3920a0b312d87482430315a00b47dca50af751
SHA512

1abbf3e11c7094fc28a415449d16dcf1083668a46f781115f3e2b89cc0d8d0efab75c2adac8050f0d21f5cea002b78ab79f112afaee2567db83cd41cd76c9a5f
SSDEEP

24576:L0fk/yM907kpBcW/8WH5RbiDLTmAYu+oA0Ar2:48acrrcW/vZdkMJ9

Score

10^/10

Malware Config

Targets

- Target
  
  file.exe
- Size
  
  859KB
- MD5
  
  0c905584bc842c087f5b9a927b34d178
- SHA1
  
  1320741a3c09793b9b1044b3f3096ec289e3c2ea
- SHA256
  
  c0b66b41d0206b4e2f3eaff9ff3920a0b312d87482430315a00b47dca50af751
- SHA512
  
  1abbf3e11c7094fc28a415449d16dcf1083668a46f781115f3e2b89cc0d8d0efab75c2adac8050f0d21f5cea002b78ab79f112afaee2567db83cd41cd76c9a5f
- SSDEEP
  
  24576:L0fk/yM907kpBcW/8WH5RbiDLTmAYu+oA0Ar2:48acrrcW/vZdkMJ9
Score

10^/10

guloader discovery downloader spyware stealer
- Guloader family
  guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  960a5c48e25cf2bca332e74e11d825c9
- SHA1
  
  da35c6816ace5daf4c6c1d57b93b09a82ecdc876
- SHA256
  
  484f8e9f194ed9016274ef3672b2c52ed5f574fb71d3884edf3c222b758a75a2
- SHA512
  
  cc450179e2d0d56aee2ccf8163d3882978c4e9c1aa3d3a95875fe9ba9831e07ddfd377111dc67f801fa53b6f468a418f086f1de7c71e0a5b634e1ae2a67cd3da
- SSDEEP
  
  192:jVL7iZJX76BiqsO7+UZEw+RlthVEoC0O3XB:g7ssOpZs/hS3X
Score

3^/10

discovery
behavioral3 behavioral4