guloader | 37aa05adb1f5408e886287c8b1ea074315a42ece0d47cbfe6678c26b6c396deb

General

Target
37aa05adb1f5408e886287c8b1ea074315a42ece0d47cbfe6678c26b6c396deb.exe
Size 417KB
Sample260306-sdapbsaz7z
SHA256 37aa05adb1f5408e886287c8b1ea074315a42ece0d47cbfe6678c26b6c396deb
MD5 eceaa017d7c45b81dbfe192b71de63ed
SHA1 d6ddeb437483e8e4efe73bb6d6aca345b351406c
SHA512 220d1bb0866bcd596bae096daeb7fa57a2bc7b2cfd686336ad06617669369a9f17bc552039be8fe8c72847d1fa847a4fdaeabb7c7db8a5045d52cb569b27d781
SSDEEP 6144:dNDlOLZLClTgEN/HqnXYPXBNSBsiGAgynWxGiQBhTqwwM8Lt:dk8TgEN/HOExESAhkjg+wwM8R
TLSH
T19394E147EB1BA820C24544B3D8F589FAE7709D62A556047E3382FF1E98365CF8E1827D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  37aa05adb1f5408e886287c8b1ea074315a42ece0d47cbfe6678c26b6c396deb.exe
- Size 417KB
- SHA256 37aa05adb1f5408e886287c8b1ea074315a42ece0d47cbfe6678c26b6c396deb
- MD5 eceaa017d7c45b81dbfe192b71de63ed
- SHA1 d6ddeb437483e8e4efe73bb6d6aca345b351406c
- SHA512 220d1bb0866bcd596bae096daeb7fa57a2bc7b2cfd686336ad06617669369a9f17bc552039be8fe8c72847d1fa847a4fdaeabb7c7db8a5045d52cb569b27d781
- SSDEEP 6144:dNDlOLZLClTgEN/HqnXYPXBNSBsiGAgynWxGiQBhTqwwM8Lt:dk8TgEN/HOExESAhkjg+wwM8R
- TLSH
  T19394E147EB1BA820C24544B3D8F589FAE7709D62A556047E3382FF1E98365CF8E1827D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader guloader
- Guloader family
  guloader
- Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
- MD5 8cf2ac271d7679b1d68eefc1ae0c5618
- SHA1 7cc1caaa747ee16dc894a600a4256f64fa65a9b8
- SHA512 ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
- SSDEEP 192:BenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XB9IwL:B8+Qlt70Fj/lQRY/9VjjlL
- TLSH
  T121427D1193B089F2F590593805A67F2A6FBEAC6C27E44963CFE345853D702DFA47A243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 c5ba017732597a82f695b084d1aa7fe3b356168cc66105b9392a9c5b06be5188
- MD5 ec9640b70e07141febbe2cd4cc42510f
- SHA1 64a5e4b90e5fe62aa40e7ac9e16342ed066f0306
- SHA512 47605b217313c7fe6ce3e9a65da156a2fba8d91e4ed23731d3c5e432dd048ff5c8f9ae8bb85a6a39e1eac4e1b6a22862aa72d3b1b1c8255858997cdd4db5d1fe
- SSDEEP 192:oRsHeylO012En8pqHtcE0PuAgkOyPIFc:sATI0d8pUP0WAgkBPIFc
- TLSH
  T156120992E6A450B3C5E6133F35AA2B2DCBBD5325B0922C0083738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Guloader family

Guloader,Cloudeye

Loads dropped DLL

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6