guloader | 6548b31d1794c97055a8295f1b20716b6d8c458b7251de1e6d94cceca01f9c6b | Triage

Sharing

General

Target

6548b31d1794c97055a8295f1b20716b6d8c458b7251de1e6d94cceca01f9c6b.exe
Size

1.0MB
Sample

250208-d5xkvatrgl
MD5

43722a70fe95fbdb567767527b6d4362
SHA1

26499d72b6a7f8749b54b7cf603daf05555b62c2
SHA256

6548b31d1794c97055a8295f1b20716b6d8c458b7251de1e6d94cceca01f9c6b
SHA512

0a52a8b5824a49b763ebf0a30e88fc195bc1cbbcd34968f56bc83fc09181e09f1a682e282866c8ecd15d1e458291f73ace15d748a9c692be514816af61e63bd2
SSDEEP

24576:+5izNJnrLCfHyW06YMexXYvRCEOYkYRU2fNYwYtYPY:+kzO/o5ovRH1bqyuXOg

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  6548b31d1794c97055a8295f1b20716b6d8c458b7251de1e6d94cceca01f9c6b.exe
- Size
  
  1.0MB
- MD5
  
  43722a70fe95fbdb567767527b6d4362
- SHA1
  
  26499d72b6a7f8749b54b7cf603daf05555b62c2
- SHA256
  
  6548b31d1794c97055a8295f1b20716b6d8c458b7251de1e6d94cceca01f9c6b
- SHA512
  
  0a52a8b5824a49b763ebf0a30e88fc195bc1cbbcd34968f56bc83fc09181e09f1a682e282866c8ecd15d1e458291f73ace15d748a9c692be514816af61e63bd2
- SSDEEP
  
  24576:+5izNJnrLCfHyW06YMexXYvRCEOYkYRU2fNYwYtYPY:+kzO/o5ovRH1bqyuXOg
Score

10^/10

discovery guloader downloader
- Guloader family
  guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Downloads MZ/PE file
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  cf85183b87314359488b850f9e97a698
- SHA1
  
  6b6c790037eec7ebea4d05590359cb4473f19aea
- SHA256
  
  3b6a5cb2a3c091814fce297c04fb677f72732fb21615102c62a195fdc2e7dfac
- SHA512
  
  fe484b3fc89aeed3a6b71b90b90ea11a787697e56be3077154b6ddc2646850f6c38589ed422ff792e391638a80a778d33f22e891e76b5d65896c6fb4696a2c3b
- SSDEEP
  
  96:3IsUxO9udx4qYp7AJb76BykUbQMtHUOA5Iv+RnsrqeXV+d1g2IW9t2c+cEwF9oug:YVL7ikJb76BQUoUm+RnyXVYO2RvHoug
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

guloaderdiscoverydownloader

behavioral3

behavioral4