guloader | 1c3b40e16baa8378b035a428da10fd16fdd13da968c4222325d9bd72eb34b736

General

Target
1c3b40e16baa8378b035a428da10fd16fdd13da968c4222325d9bd72eb34b736.exe
Size 697KB
Sample260825-d3lessek2v
SHA256 1c3b40e16baa8378b035a428da10fd16fdd13da968c4222325d9bd72eb34b736
MD5 5a5060bfe6e6b3aa2570756ebf3624a7
SHA1 4db4e7fac0fbe044cd7f60f55db322e24f6cc139
SHA512 b461487a55f7136c831f9cf4924fdc7b0c46487be16e2a1b26079b46cd2cf1e06388864861fff2f4d374f79bcd47aaebebcac91bb865d66532ca958cecc21f4b
SSDEEP 12288:XT/rmFskovj8WI1Rzv3TdPOXfPpitgMkAXfXZJkaCRUgU6gZaPTXVA:XTD3TL8J1Rzv3pmvxitgYfvFMUHMPJA
TLSH
T1C9E4029173238165DC394F31097A8DB12F116D7AAE8049DA72FCBB0EADB5761090F3A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  1c3b40e16baa8378b035a428da10fd16fdd13da968c4222325d9bd72eb34b736.exe
- Size 697KB
- SHA256 1c3b40e16baa8378b035a428da10fd16fdd13da968c4222325d9bd72eb34b736
- MD5 5a5060bfe6e6b3aa2570756ebf3624a7
- SHA1 4db4e7fac0fbe044cd7f60f55db322e24f6cc139
- SHA512 b461487a55f7136c831f9cf4924fdc7b0c46487be16e2a1b26079b46cd2cf1e06388864861fff2f4d374f79bcd47aaebebcac91bb865d66532ca958cecc21f4b
- SSDEEP 12288:XT/rmFskovj8WI1Rzv3TdPOXfPpitgMkAXfXZJkaCRUgU6gZaPTXVA:XTD3TL8J1Rzv3pmvxitgYfvFMUHMPJA
- TLSH
  T1C9E4029173238165DC394F31097A8DB12F116D7AAE8049DA72FCBB0EADB5761090F3A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery downloader guloader
- Family: Guloader,Cloudeye
  A shellcode based downloader first seen in 2020.
  downloader guloader
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 acf90ab6f4edc687e94aaf604d05e16e6cfb5e35873783b50c66f307a35c6506
- MD5 6e55a6e7c3fdbd244042eb15cb1ec739
- SHA1 070ea80e2192abc42f358d47b276990b5fa285a9
- SHA512 2d504b74da38edc967e3859733a2a9cacd885db82f0ca69bfb66872e882707314c54238344d45945dc98bae85772aceef71a741787922d640627d3c8ae8f1c35
- SSDEEP 192:MenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBaIwL:M8+Qlt70Fj/lQRY/9VjjgL
- TLSH
  T1BE428D1193B089F2F590593805A67F2A6FBEAC5C27E44A63CFE345853D702DFA47A243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Family: Guloader,Cloudeye

Loads dropped DLL

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4