guloader | 8d869f72fa8076b1c43578e7672e2e8d2c16e40a86b72f9da3e64e5a8f817ea1 | Triage™

Login
Reports

Overview

overview

Static

static

3

8d869f72fa...a1.exe

windows10-2004-x64

8d869f72fa...a1.exe

windows11-ltsc_2024-x64

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

earthpeas.com

windows10-2004-x64

earthpeas.com

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
8d869f72fa8076b1c43578e7672e2e8d2c16e40a86b72f9da3e64e5a8f817ea1.exe
Size 341KB
Sample260810-p2schahn8x
SHA256 8d869f72fa8076b1c43578e7672e2e8d2c16e40a86b72f9da3e64e5a8f817ea1
MD5 b0aeeec0740fafba4c8e2e0f21d51b5d
SHA1 f6ae26a193b4f1a15e27c768265db36b348feb08
SHA512 9ce42875b6c506033ad9b01a4ecef6fd0b80038fedc95f04349f6646e0c49512cc43cb8ec412d61e96c6bd5218fdbf8abe1edd7f18a9b21b43eacfba75220a00
SSDEEP 6144:SMm4CCEv3liZFEDwxQRy4Cm4k2WQ5s9Px5RzJEasQsd29yeTWrf16pRXxCLxkY3h:SMw3v3lisDpRfr4c6iPx5fojd29NTWr7
TLSH
T1457412A162D0D43AED798231C9734AFDA1E69E18D862894B73D1BF3139712D17E0FB60
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

guloader discovery downloader

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

8d869f72fa8076b1c43578e7672e2e8d2c16e40a86b72f9da3e64e5a8f817ea1.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery downloader guloader

Behavioral task

behavioral2

Sample

8d869f72fa8076b1c43578e7672e2e8d2c16e40a86b72f9da3e64e5a8f817ea1.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery downloader guloader

Behavioral task

behavioral3

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

earthpeas.com

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

earthpeas.com

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  8d869f72fa8076b1c43578e7672e2e8d2c16e40a86b72f9da3e64e5a8f817ea1.exe
- Size 341KB
- SHA256 8d869f72fa8076b1c43578e7672e2e8d2c16e40a86b72f9da3e64e5a8f817ea1
- MD5 b0aeeec0740fafba4c8e2e0f21d51b5d
- SHA1 f6ae26a193b4f1a15e27c768265db36b348feb08
- SHA512 9ce42875b6c506033ad9b01a4ecef6fd0b80038fedc95f04349f6646e0c49512cc43cb8ec412d61e96c6bd5218fdbf8abe1edd7f18a9b21b43eacfba75220a00
- SSDEEP 6144:SMm4CCEv3liZFEDwxQRy4Cm4k2WQ5s9Px5RzJEasQsd29yeTWrf16pRXxCLxkY3h:SMw3v3lisDpRfr4c6iPx5fojd29NTWr7
- TLSH
  T1457412A162D0D43AED798231C9734AFDA1E69E18D862894B73D1BF3139712D17E0FB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader guloader
- Family: Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 09acfc5ee34a1dfa1af3a9d34f00c3b1327b56641feebd536e13752349c08ac8
- MD5 014a3be4a7c1ccb217916dbf4f222bd1
- SHA1 9b4c41eb0e84886beb5591d8357155e27f9c68ed
- SHA512 0f3d1bf548e29a136150b699665a3f22c6ea2821701737363fa2920b51c391d735f1eae92dea8af655e7d07304bd3d06e4aff3f5a82fa22bcf5d1690013eb922
- SSDEEP 48:S46+/iTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mMofjLl:zsuPbOBtWZBV8jAWiAJCdv2CmfL
- TLSH
  T143C19470F3C248B9C491413368E737D36612EE746784500F9B6311AA38209E7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5
- MD5 564bb0373067e1785cba7e4c24aab4bf
- SHA1 7c9416a01d821b10b2eef97b80899d24014d6fc1
- SHA512 22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472
- SSDEEP 192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL
- TLSH
  T1F6427D1193B089F2F590593805A67F2A6FBEAC5C27E44963CFE345853D702DFA47A243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 6bf9cccd8a600f4d442efe201e8c07b49605ba35f49a4b3ab22fa2641748e156
- MD5 48f3e7860e1de2b4e63ec744a5e9582a
- SHA1 420c64d802a637c75a53efc8f748e1aede3d6dc6
- SHA512 28716ddea580eeb23d93d1ff6ea0cf79a725e13c8f8a17ec9dfacb1fe29c7981ad84c03aed05663adc52365d63d19ec2f366762d1c685e3a9d93037570c3c583
- SSDEEP 96:oFsvUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YuNqkzfS:oFsvWyNO81b8pCHFcM0PuAgkOywIFc
- TLSH
  T19112F992E5A450B3C5D6533A35AA2F2DCBBD5329B0926C00C7738E4D39355B66E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  earthpeas.com
- Size 79KB
- SHA256 ace9185e1eccd2ab2038e0f722ca2a234a35ae7bfb732dc8a6534ac57c37abee
- MD5 110232d85146372234b94ff18b6ca936
- SHA1 7a668c4387095ec91c3c336766db1dfb17e575a5
- SHA512 3676132117a8b69d7865d85dd93db0ca6ef96010418a787277079a5c6b3699e2f4490badfbda33460b5e50af28d98b04a2a3c51e47097743fbbeefff975a5bd0
- SSDEEP 96:tfe2zfpZMOjwZ9AyX7yww9sePY5w5Fts0UQd2TFTw:NBH2It
- TLSH
  T1BA835BD3B5F06CA64A6CF3C2944AF55042991517FC0CA14E28989C476DB73213A1DBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverydownloaderguloader

behavioral2

discoverydownloaderguloader

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

© 2018-2026

Terms | Privacy