guloader | 76ea8da0b1641a77ef92d4a73aaa44d9c5d0abe392b546148f61af0e895a0ba9 | Triage

Submit
Reports

Overview

overview

Static

static

3

Hydroponically.exe

windows11-21h2-x64

$PLUGINSDI...em.dll

windows11-21h2-x64

8

Resubmissions

11-02-2025 18:13

250211-wt6y9avrdt 10

11-02-2025 18:10

250211-wsb3gsvnar 10

Sharing

General

Target

Hydroponically.exe
Size

1.0MB
Sample

250211-wt6y9avrdt
MD5

0cabe66c0ed542e70a70b64927fec71f
SHA1

1fafdf96adb43e3c34463c80eb9d85f80af0b379
SHA256

76ea8da0b1641a77ef92d4a73aaa44d9c5d0abe392b546148f61af0e895a0ba9
SHA512

cfa24572c06e5575c22edfccb0c4d0c926e170b651082d513d504cc3b882163df7ec16f7f347265e915decf43b91ecdb31628d612f39134cc7d59ec083647f41
SSDEEP

24576:LzOEC045+XIG9UFPXbQEEDbrQzNG5Hgapm:eEeQ4nfbQEEf3NgX

Score

10^/10

guloader discovery downloader

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Hydroponically.exe

Resource

win11-20250211-en

guloader discovery downloader

windows11-21h2-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

$PLUGINSDIR/System.dll

Resource

win11-20250210-en

windows11-21h2-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  Hydroponically.exe
- Size
  
  1.0MB
- MD5
  
  0cabe66c0ed542e70a70b64927fec71f
- SHA1
  
  1fafdf96adb43e3c34463c80eb9d85f80af0b379
- SHA256
  
  76ea8da0b1641a77ef92d4a73aaa44d9c5d0abe392b546148f61af0e895a0ba9
- SHA512
  
  cfa24572c06e5575c22edfccb0c4d0c926e170b651082d513d504cc3b882163df7ec16f7f347265e915decf43b91ecdb31628d612f39134cc7d59ec083647f41
- SSDEEP
  
  24576:LzOEC045+XIG9UFPXbQEEDbrQzNG5Hgapm:eEeQ4nfbQEEf3NgX
Score

10^/10

guloader discovery downloader
- Guloader family
  guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  3f176d1ee13b0d7d6bd92e1c7a0b9bae
- SHA1
  
  fe582246792774c2c9dd15639ffa0aca90d6fd0b
- SHA256
  
  fa4ab1d6f79fd677433a31ada7806373a789d34328da46ccb0449bbf347bd73e
- SHA512
  
  0a69124819b7568d0dea4e9e85ce8fe61c7ba697c934e3a95e2dcfb9f252b1d9da7faf8774b6e8efd614885507acc94987733eba09a2f5e7098b774dfc8524b6
- SSDEEP
  
  192:OPtkumJX7zB22kGwfy0mtVgkCPOsX1un:/702k5qpdsXQn
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

guloaderdiscoverydownloader

behavioral2

© 2018-2025

Terms | Privacy