=
We are hiring! Windows Kernel Developer (Remote), apply here!
flash

SecuriteInfo.com.UDS.Trojan-Downloader.Win32.GuLoader.gen.17738.exe

Status: finished
Submission Time: 2022-05-14 06:29:06 +02:00
Malicious
Trojan
Evader
Spyware
GuLoader

Comments

Tags

  • exe

Details

  • Analysis ID:
    626513
  • API (Web) ID:
    994017
  • Analysis Started:
    2022-05-14 06:29:06 +02:00
  • Analysis Finished:
    2022-05-14 06:57:54 +02:00
  • MD5:
    6f790a9e28d73d498c89a19cfe941d1b
  • SHA1:
    1ec63e32364359f656b29eb37e3a2af11ecc62a8
  • SHA256:
    2241716c3ddff7b1f771a6e3c91b67ded01e9f78026ecc124863099dbe5ac405
  • Technologies:
Full Report Management Report IOC Report Engine Info Verdict Score Reports

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

malicious
88/100

System: Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, IE 11, Chrome 93, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Run Condition: Suspected Instruction Hammering

malicious
100/100

malicious
5/68

malicious

IPs

IP Country Detection
185.236.228.217
Portugal
154.53.50.251
United States
178.237.33.50
Netherlands

Domains

Name IP Detection
top.banifabuse01.xyz
154.53.50.251
geoplugin.net
178.237.33.50

URLs

Name Detection
http://185.236.228.217/private/Spread.bin
http://geoplugin.net/json.gp
http://www.w3c.org/TR/1999/REC-html401-19991224/frameset.dtd
Click to see the 14 hidden entries
http://aia.mesince.com/ms-tsa.cer02
https://inference.location.live.net/inferenceservice/v21/Pox/GetLocationUsingFingerprinte1e71f6b-214
http://www.mesince.com/policy/0
http://inference.location.live.com11111111-1111-1111-1111-111111111111https://partnernext-inference.
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd
http://nsis.sf.net/NSIS_ErrorError
http://crl.mesince.com/ms.crl0
http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd-//W3O//DTD
http://aia.mesince.com/ms.cer0
http://www.gopher.ftp://ftp.
http://ocsp.mesince.com0)
http://crl.mesince.com/ms-tsa.crl0F
http://ocsp.mesince.com0-

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\L2D128LW\json[1].json
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Temp\fusionstilladelsen.non
data
#
C:\Users\user\AppData\Local\Temp\nsb10DD.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_063905.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_064210.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_064515.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_064817.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_065118.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_065418.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_065718.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_070018.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_070319.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_070619.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_070919.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_071219.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_071520.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_071820.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_072120.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_072420.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_072721.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_073021.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_073321.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_073621.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_073921.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_074222.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_074522.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_074822.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_075122.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_075423.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_075723.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_080023.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_080323.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_080624.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_080924.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_081224.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_081524.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_081824.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_082125.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_082425.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_082725.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_083025.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_083326.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_083626.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_083926.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_084226.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_084527.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_084827.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_085127.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_085427.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_085728.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_090028.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_090328.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_090628.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_090928.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_091229.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_091529.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_091829.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_092129.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_092430.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_092730.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_093030.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_093330.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_093631.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_093931.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_094231.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_094531.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_094832.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_095132.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_095432.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_095732.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_100032.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_100333.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_100633.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_100933.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_101233.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_101534.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_101834.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_102134.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_102434.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_102735.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_103035.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_103335.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_103635.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_103936.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_104236.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_104536.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_104836.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_105136.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_105437.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_105737.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_110037.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_110337.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_110638.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_110938.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_111238.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_111538.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_111839.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_112139.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_112439.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Roaming\Screenshots\time_20220514_112739.png
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
#