General
- Target 05d2a901f74fcff6cb090a9a34be5f2b.exe
- Size 88KB
- Sample210830-atlr5tn1dn
- SHA256 fc4e44c0b91ce5f076bab43f739c4100de70423b9e867d2f34ff265e37596bd9
Score
10/10
Malware Config
Targets
-
- Target 05d2a901f74fcff6cb090a9a34be5f2b.exe
- Size 88KB
- SHA256 fc4e44c0b91ce5f076bab43f739c4100de70423b9e867d2f34ff265e37596bd9
Score10/10-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Remcos
Remcos is a closed-source remote control and surveillance software.
-
Checks QEMU agent file
Checks presence of QEMU agent, possibly to detect virtualization.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext