guloader | 9856e1947303d24a288bfda2c0523a9d111cda99ca7a3968d45a0b74971330ee

General

Target
9856e1947303d24a288bfda2c0523a9d111cda99ca7a3968d45a0b74971330ee.exe
Size 304KB
Sample260810-r7jcwsbn2v
SHA256 9856e1947303d24a288bfda2c0523a9d111cda99ca7a3968d45a0b74971330ee
MD5 32c3deb1393d65c39052b862b2525598
SHA1 2116dfdf180edf7ddd2a1f1d50f13e6735e1ccb5
SHA512 61e66c5f24067ca70b35eaf27d009611d2cef732d342483c3fc732fc4df83a92add1379bbb4d34f54e1b50d536595d948244e5f46ad884f7754600ac911d2a6c
SSDEEP 6144:yB+pgU8O2WlqNhtWMZg2q0RpeoRlffJ6Zd1tW0Esu42BuPb4J7+exCAaFRTm:ygUOxlCnW8g2BRpe6f/0Es92Ib9q8LTm
TLSH
T16D6412553686C427C0619B70CC7A89F64518DEF6CA27C30BBB19BFA97A701D28F0D396
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  9856e1947303d24a288bfda2c0523a9d111cda99ca7a3968d45a0b74971330ee.exe
- Size 304KB
- SHA256 9856e1947303d24a288bfda2c0523a9d111cda99ca7a3968d45a0b74971330ee
- MD5 32c3deb1393d65c39052b862b2525598
- SHA1 2116dfdf180edf7ddd2a1f1d50f13e6735e1ccb5
- SHA512 61e66c5f24067ca70b35eaf27d009611d2cef732d342483c3fc732fc4df83a92add1379bbb4d34f54e1b50d536595d948244e5f46ad884f7754600ac911d2a6c
- SSDEEP 6144:yB+pgU8O2WlqNhtWMZg2q0RpeoRlffJ6Zd1tW0Esu42BuPb4J7+exCAaFRTm:ygUOxlCnW8g2BRpe6f/0Es92Ib9q8LTm
- TLSH
  T16D6412553686C427C0619B70CC7A89F64518DEF6CA27C30BBB19BFA97A701D28F0D396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader guloader
- Family: Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc
- MD5 a4dd044bcd94e9b3370ccf095b31f896
- SHA1 17c78201323ab2095bc53184aa8267c9187d5173
- SHA512 87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a
- SSDEEP 192:em24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlESl:m8QIl975eXqlWBrz7YLOlE
- TLSH
  T168325C12135081F3E4918138886B3A276B6A15029BF98E57DFD39646BE21BE3BD7D603
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Guloader,Cloudeye

Loads dropped DLL

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4