guloader | 2d4821a97fccb90138a732b9ef6ad9f5c7880cb583b44807860ce1184afb7e7f

General

Target
2d4821a97fccb90138a732b9ef6ad9f5c7880cb583b44807860ce1184afb7e7f.exe
Size 1.2MB
Sample260727-dcrh5aha73
SHA256 2d4821a97fccb90138a732b9ef6ad9f5c7880cb583b44807860ce1184afb7e7f
MD5 55f762797c8dd7296c3eff76fd5c4ffd
SHA1 92a8ff79b56ccae49c2cd18a3180a761e0d51fa3
SHA512 10580bc29720bc9ef035421427691715b685e49fd5b3f089046b1f0cd3281cb3ab309eb3b866cfca866dd094ca7790772491c2856176436371e8c40409bc09cc
SSDEEP 24576:ETAopOx3mYKNROjwSxjpWTB/OujvuzmyxAgh8uI464mp728FjeIM:yMWYSRGwPFTeMgh8uI4Mpi8FjeIM
TLSH
T106550190F0A581CAEEBA0B729D3BDD3421E1BEFC94F5911E51DE7A3A36D3351110E60A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2d4821a97fccb90138a732b9ef6ad9f5c7880cb583b44807860ce1184afb7e7f.exe
- Size 1.2MB
- SHA256 2d4821a97fccb90138a732b9ef6ad9f5c7880cb583b44807860ce1184afb7e7f
- MD5 55f762797c8dd7296c3eff76fd5c4ffd
- SHA1 92a8ff79b56ccae49c2cd18a3180a761e0d51fa3
- SHA512 10580bc29720bc9ef035421427691715b685e49fd5b3f089046b1f0cd3281cb3ab309eb3b866cfca866dd094ca7790772491c2856176436371e8c40409bc09cc
- SSDEEP 24576:ETAopOx3mYKNROjwSxjpWTB/OujvuzmyxAgh8uI464mp728FjeIM:yMWYSRGwPFTeMgh8uI4Mpi8FjeIM
- TLSH
  T106550190F0A581CAEEBA0B729D3BDD3421E1BEFC94F5911E51DE7A3A36D3351110E60A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader guloader
- Family: Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH
  T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Guloader,Cloudeye

Loads dropped DLL

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4