General
- Target 973c74057f1054e07a98170568bb9bc9
- Size 96KB
- Sample210906-vah8eabcd9
- SHA256 6cbaf335b0737ddf3f782688324856ef573d1978897299461f7a43c8efeaa008
Score
10/10
Malware Config
Targets
-
- Target 973c74057f1054e07a98170568bb9bc9
- Size 96KB
- SHA256 6cbaf335b0737ddf3f782688324856ef573d1978897299461f7a43c8efeaa008
Score10/10-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Remcos
Remcos is a closed-source remote control and surveillance software.
-
Checks QEMU agent file
Checks presence of QEMU agent, possibly to detect virtualization.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext