GuLoader | Detection.FYI

Injected Browser Process Spawning Rundll32 - GuLoader Activity

Oct 23, 2025 · attack.privilege-escalation attack.defense-evasion attack.t1055 detection.emerging-threats ·
Share on:

Detects the execution of installed GuLoader malware on the host. GuLoader is initiating network connections via the rundll32.exe process that is spawned via a browser parent(injected) process.

Read More