S0561 GuLoader

malwareEnterprise

platformsWindows

also known asGuLoader

GuLoader is a file downloader that has been used since at least December 2019 to distribute a variety of remote administration tool (RAT) malware, including NETWIRE, Agent Tesla, NanoCore, FormBook, and Parallax RAT.

techniques used (12)

ATT&CK techniques this enables or maps to.

T1055Process Injection
T1070.004File Deletion
T1071.001Web Protocols
T1102Web Service
T1105Ingress Tool Transfer
T1106Native API
T1204.001Malicious Link
T1204.002Malicious File
T1497.001System Checks
T1497.003Time Based Checks
T1547.001Registry Run Keys / Startup Folder
T1566.002Spearphishing Link

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan