GULoader Campaigns: A Deep Dive Analysis of a highly evasive Shellcode-based loader

In recent GULoader campaigns, researchers witnessed a rise in NSIS-based installers delivered via email as malspam that use plugin libraries to execute the GU shellcode on the victim system.