guloader | cb26a50bee3e03bc5563d78899ec5cad699ac135308461d6281e3eff868f16d0

General

Target

PO-9AHFFDH-H4747849.exe
Size

675KB
Sample

250219-fe4mksyr17
MD5

7dd465a931791e7bed441c1496e45c1c
SHA1

7c7887c183bedbb06390e8b6bbccb87cd0e39491
SHA256

cb26a50bee3e03bc5563d78899ec5cad699ac135308461d6281e3eff868f16d0
SHA512

fbb45f9f87a89dbfb5b33ffd40e123a95922e05c6fc0db2f200c300951c6e720d0ec84b4661e4fa359cfda573c58829266a2fc60386bce6e80f99fbf10079d6c
SSDEEP

12288:GFgYxnPtmAhtPoOhRBwlA+OLLU+ivZjrr/TfqJC8g7s3XSo:aVhcGRBwlARLLoPzrqJC8g7GCo

Score

10^/10

Malware Config

Targets

- Target
  
  PO-9AHFFDH-H4747849.exe
- Size
  
  675KB
- MD5
  
  7dd465a931791e7bed441c1496e45c1c
- SHA1
  
  7c7887c183bedbb06390e8b6bbccb87cd0e39491
- SHA256
  
  cb26a50bee3e03bc5563d78899ec5cad699ac135308461d6281e3eff868f16d0
- SHA512
  
  fbb45f9f87a89dbfb5b33ffd40e123a95922e05c6fc0db2f200c300951c6e720d0ec84b4661e4fa359cfda573c58829266a2fc60386bce6e80f99fbf10079d6c
- SSDEEP
  
  12288:GFgYxnPtmAhtPoOhRBwlA+OLLU+ivZjrr/TfqJC8g7s3XSo:aVhcGRBwlARLLoPzrqJC8g7GCo
Score

10^/10

guloader discovery downloader spyware stealer
- Guloader family
  guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Reads user/profile data of local email clients
  Email clients store some user data on disk where infostealers will often target it.
  spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  0063d48afe5a0cdc02833145667b6641
- SHA1
  
  e7eb614805d183ecb1127c62decb1a6be1b4f7a8
- SHA256
  
  ac9dfe3b35ea4b8932536ed7406c29a432976b685cc5322f94ef93df920fede7
- SHA512
  
  71cbbcaeb345e09306e368717ea0503fe8df485be2e95200febc61bcd8ba74fb4211cd263c232f148c0123f6c6f2e3fd4ea20bdecc4070f5208c35c6920240f0
- SSDEEP
  
  192:qPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4U:F7VpNo8gmOyRsVc4
Score

3^/10

discovery
behavioral3 behavioral4