guloader | 06ec46f6d1f609aeafb8e8f5be8d12f8874902661394ce04094249558237c29d

General

Target
06ec46f6d1f609aeafb8e8f5be8d12f8874902661394ce04094249558237c29d.exe
Size 502KB
Sample260528-rssysaaz8n
SHA256 06ec46f6d1f609aeafb8e8f5be8d12f8874902661394ce04094249558237c29d
MD5 69568a88abae198f5ab9ae1578383cc2
SHA1 8465bb8304fcc90bc1fd0dd3da28d959258f4107
SHA512 1bfaf5241bc2c16dd1d75363c6437b526f7d59066ab7fe88734c04e17e3fc5555a2732476586814dc131aa7cfee630597587a66ff08d1a2c67b8b6b43beca3f7
SSDEEP 12288:Xn0A1rjiXSUyo10AOwpn8GcqxKGghasb6j8/:EAkXLgG5K15Wjg
TLSH
T1C0B4F0D67B88C663E14109B1DEB2CCF59B65BDA0C9C627073B80BF4FB9BB5A22115113
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  06ec46f6d1f609aeafb8e8f5be8d12f8874902661394ce04094249558237c29d.exe
- Size 502KB
- SHA256 06ec46f6d1f609aeafb8e8f5be8d12f8874902661394ce04094249558237c29d
- MD5 69568a88abae198f5ab9ae1578383cc2
- SHA1 8465bb8304fcc90bc1fd0dd3da28d959258f4107
- SHA512 1bfaf5241bc2c16dd1d75363c6437b526f7d59066ab7fe88734c04e17e3fc5555a2732476586814dc131aa7cfee630597587a66ff08d1a2c67b8b6b43beca3f7
- SSDEEP 12288:Xn0A1rjiXSUyo10AOwpn8GcqxKGghasb6j8/:EAkXLgG5K15Wjg
- TLSH
  T1C0B4F0D67B88C663E14109B1DEB2CCF59B65BDA0C9C627073B80BF4FB9BB5A22115113
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader guloader
- Family: Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 44e5dfd551b38e886214bd6b9c8ee913c4c4d1f085a6575d97c3e892b925da82
- MD5 883eff06ac96966270731e4e22817e11
- SHA1 523c87c98236cbc04430e87ec19b977595092ac8
- SHA512 60333253342476911c84bbc1d9bf8a29f811207787fdd6107dce8d2b6e031669303f28133ffc811971ed7792087fe90fb1faabc0af4e91c298ba51e28109a390
- SSDEEP 96:UPDYcJ+nx4vVp76JX7zBlkCg21Fxz4THxtrqw1at0JgwLEjo+OB3yUVCdl/wNj+l:UPtkuWJX7zB3kGwfy0nyUVsxCjOMb1u
- TLSH
  T1B8324B15035046F3E196853C542B3AAB6BB879118AF04E43CFF36892FE386C79D7A352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Guloader,Cloudeye

Loads dropped DLL

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4