guloader | cf0fca518efdb30e694787bfca05de89ec1942cd4e25433d1533a30a95adcf98

General

Target
cf0fca518efdb30e694787bfca05de89ec1942cd4e25433d1533a30a95adcf98.exe
Size 761KB
Sample260825-b8p9ts1yev
SHA256 cf0fca518efdb30e694787bfca05de89ec1942cd4e25433d1533a30a95adcf98
MD5 4c46e8a5830a06f53802e1ec3b350aae
SHA1 395668433ea34b1786c1656f244cafc1f7b3491b
SHA512 31f07e0fe8d4b07bf6b3c7e83df6bd9610fe2dd5ae2980a1755439f3cc80417b71f408771633c2303024b83ccdcdc643f274a1d0fece9ea886aad5dc6cf6a15b
SSDEEP 12288:0WXhigNtYYYGrbM+GMRXUSosJloUXCJJkLjFC9wn5iSA81g/QXDfwvJ7p+HD:0AHN+Y54YX5vl3XCkLBnEi1fXTQy
TLSH
T182F4239426E3924AD5CA3C729993D678FF339D0184225A2F1F88FEDE28315E78C2414F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  cf0fca518efdb30e694787bfca05de89ec1942cd4e25433d1533a30a95adcf98.exe
- Size 761KB
- SHA256 cf0fca518efdb30e694787bfca05de89ec1942cd4e25433d1533a30a95adcf98
- MD5 4c46e8a5830a06f53802e1ec3b350aae
- SHA1 395668433ea34b1786c1656f244cafc1f7b3491b
- SHA512 31f07e0fe8d4b07bf6b3c7e83df6bd9610fe2dd5ae2980a1755439f3cc80417b71f408771633c2303024b83ccdcdc643f274a1d0fece9ea886aad5dc6cf6a15b
- SSDEEP 12288:0WXhigNtYYYGrbM+GMRXUSosJloUXCJJkLjFC9wn5iSA81g/QXDfwvJ7p+HD:0AHN+Y54YX5vl3XCkLBnEi1fXTQy
- TLSH
  T182F4239426E3924AD5CA3C729993D678FF339D0184225A2F1F88FEDE28315E78C2414F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader guloader
- Family: Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 44e5dfd551b38e886214bd6b9c8ee913c4c4d1f085a6575d97c3e892b925da82
- MD5 883eff06ac96966270731e4e22817e11
- SHA1 523c87c98236cbc04430e87ec19b977595092ac8
- SHA512 60333253342476911c84bbc1d9bf8a29f811207787fdd6107dce8d2b6e031669303f28133ffc811971ed7792087fe90fb1faabc0af4e91c298ba51e28109a390
- SSDEEP 96:UPDYcJ+nx4vVp76JX7zBlkCg21Fxz4THxtrqw1at0JgwLEjo+OB3yUVCdl/wNj+l:UPtkuWJX7zB3kGwfy0nyUVsxCjOMb1u
- TLSH
  T1B8324B15035046F3E196853C542B3AAB6BB879118AF04E43CFF36892FE386C79D7A352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Guloader,Cloudeye

Loads dropped DLL

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4