Resubmissions

02/09/2026, 12:25

260902-plvspaxwas10

04/08/2026, 08:05

260804-jywmvszwcs10

03/08/2026, 12:29

260803-pn3lbayzez10

General

  • Target
    guloader.exe
  • Size 88KB
  • Sample260902-plvspaxwas
  • SHA256 00a2cb7a40d35f8a1eec6fad452d35ad8d62dedabb8b5b0a2674e4bc817024f3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • guloader

C2
  • https://smamcian.com/anyigrac/anyi%20lokia_gRHmJdvSm50.bin

xor.base64

Targets

    • Target
      guloader.exe
    • Size 88KB
    • SHA256 00a2cb7a40d35f8a1eec6fad452d35ad8d62dedabb8b5b0a2674e4bc817024f3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks