guloader | 63f3a9264a8afae81e4cb56f5ade6ce4a8d9f7c20a6a977d07346d6aa769878f

General

Target
63f3a9264a8afae81e4cb56f5ade6ce4a8d9f7c20a6a977d07346d6aa769878f.exe
Size 948KB
Sample260825-c7v95awdmb
SHA256 63f3a9264a8afae81e4cb56f5ade6ce4a8d9f7c20a6a977d07346d6aa769878f
MD5 5bd9119dc59d21c67c67faf81f6ec8c2
SHA1 1afc5ff23b6806bea8b83335dc802403147b30b5
SHA512 f4a5f14a7299af770cc489f3765c7caec54c32b5779b65db1db68749204f0392f2c035104a306487f5e54c6a0742dd1847aec46919d5997757de4118cb3886b8
SSDEEP 24576:SPdYZ6c4GLEmbWtr3YFyuZ+eB1SOSHxzdU3ja7tkU:+YkXmbWLeBUJ5Uk
TLSH
T13E252326B2A1D53BECB61532C8569EF637566D32D651062F5330FEDF3C33852823A628
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  63f3a9264a8afae81e4cb56f5ade6ce4a8d9f7c20a6a977d07346d6aa769878f.exe
- Size 948KB
- SHA256 63f3a9264a8afae81e4cb56f5ade6ce4a8d9f7c20a6a977d07346d6aa769878f
- MD5 5bd9119dc59d21c67c67faf81f6ec8c2
- SHA1 1afc5ff23b6806bea8b83335dc802403147b30b5
- SHA512 f4a5f14a7299af770cc489f3765c7caec54c32b5779b65db1db68749204f0392f2c035104a306487f5e54c6a0742dd1847aec46919d5997757de4118cb3886b8
- SSDEEP 24576:SPdYZ6c4GLEmbWtr3YFyuZ+eB1SOSHxzdU3ja7tkU:+YkXmbWLeBUJ5Uk
- TLSH
  T13E252326B2A1D53BECB61532C8569EF637566D32D651062F5330FEDF3C33852823A628
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader guloader persistence
- Family: Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
- MD5 4add245d4ba34b04f213409bfe504c07
- SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
- SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
- SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
- TLSH
  T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4