Malware2023

GuLoader

1Rules

1References

1Folders

2023-08-07Latest

Summary

GuLoader is tracked here as a malware family or toolset with 1 Sigma detection spanning 2023. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threathightest

Injected Browser Process Spawning Rundll32 - GuLoader Activity

Detects the execution of installed GuLoader malware on the host. GuLoader is initiating network connections via the rundll32.exe process that is spawned via a browser parent(injected) process.

WindowsProcess Creation

TA0004 · Privilege EscalationTA0005 · StealthT1055 · Process Injectiondetection.emerging-threats

kostastsaleMon Aug 072023

References

Resolving title…

Internal Research