New: Threat Exposure Validation Impact Report 2025
Learn More

GuLoader Malware

December 13, 2021

GuLoader malware can be downloaded or created in various ways, but the most common one includes the use of a document attachment with a macro that will execute a malicious payload or an exploit like CVE-2017-11882. GuLoader is unique in that it is written in Visual Basic 6 and contains a Shellcode payload wrapped inside. Yet, like many of today's malware strains, GuLoader also uses a variety of self-defense mechanisms to evade detection and defense.