General
- Target ac18a105704e785c3f515987431c9eaf.zip
- Size 8KB
- Sample230809-mfkz7aae23
- SHA256 1e729abee0163f76723f08ff6abfac3a58069d0c6810bcc2c8ee40d223a6f565
Score
10/10
Malware Config
Targets
-
- Target statement-Invoices-9098847251-DB_aabgaibajf0x0CCC_126KB__aabgaibajf0x0CCC.vbs
- Size 10KB
- SHA256 6ad1016df67ae1100b4a73b2a1bd4592fcc39a063e9446b8abda5f8a75d47420
Score10/10-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Checks QEMU agent file
Checks presence of QEMU agent, possibly to detect virtualization.
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger