guloader | 7671aa49c3696d1e98ce94df91c3c996af1cb8e58cc3b79552b475dcf8b6ca06 | Triage

Sharing

General

Target

7671aa49c3696d1e98ce94df91c3c996af1cb8e58cc3b79552b475dcf8b6ca06.exe
Size

729KB
Sample

250326-mt5xhs11et
MD5

0ecb0490b99e9edc4a212c68e747a89c
SHA1

8ffc7b16ca6f35a93b36decf433a8e32f4c0cbd6
SHA256

7671aa49c3696d1e98ce94df91c3c996af1cb8e58cc3b79552b475dcf8b6ca06
SHA512

6b498f10fdd9c4e6f722a8c42731da231e6d8698c5cb0c86489d50b69fa561a43af2d25dc8087ed2e10fa64214c2c7172eed368e9eb260c089084406db56670a
SSDEEP

12288:K/fYDzo3gOSqyRbhkIGh28mZXXfyTN+NFbl5Pj0spM86:+fGUIGABFGMzxjJ

Score

10^/10

guloader discovery downloader

Malware Config

Targets

- Target
  
  7671aa49c3696d1e98ce94df91c3c996af1cb8e58cc3b79552b475dcf8b6ca06.exe
- Size
  
  729KB
- MD5
  
  0ecb0490b99e9edc4a212c68e747a89c
- SHA1
  
  8ffc7b16ca6f35a93b36decf433a8e32f4c0cbd6
- SHA256
  
  7671aa49c3696d1e98ce94df91c3c996af1cb8e58cc3b79552b475dcf8b6ca06
- SHA512
  
  6b498f10fdd9c4e6f722a8c42731da231e6d8698c5cb0c86489d50b69fa561a43af2d25dc8087ed2e10fa64214c2c7172eed368e9eb260c089084406db56670a
- SSDEEP
  
  12288:K/fYDzo3gOSqyRbhkIGh28mZXXfyTN+NFbl5Pj0spM86:+fGUIGABFGMzxjJ
Score

10^/10

guloader discovery downloader
- Guloader family
  guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  8b3830b9dbf87f84ddd3b26645fed3a0
- SHA1
  
  223bef1f19e644a610a0877d01eadc9e28299509
- SHA256
  
  f004c568d305cd95edbd704166fcd2849d395b595dff814bcc2012693527ac37
- SHA512
  
  d13cfd98db5ca8dc9c15723eee0e7454975078a776bce26247228be4603a0217e166058ebadc68090afe988862b7514cb8cb84de13b3de35737412a6f0a8ac03
- SSDEEP
  
  192:ex24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlESlS:h8QIl972eXqlWBFSt273YOlEz
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

guloaderdiscoverydownloader

behavioral2

guloaderdiscoverydownloader

behavioral3

behavioral4