General
- Target 04172024121853atr reteks.exe
- Size 1.1MB
- Sample240422-rl9mysce3v
- SHA256 b9d1e862b5f864aab90e418632cf973132a4b4cbe4044b1fb997d9dfbd7ad0f4
Score
10/10
Malware Config
Targets
-
- Target 04172024121853atr reteks.exe
- Size 1.1MB
- SHA256 b9d1e862b5f864aab90e418632cf973132a4b4cbe4044b1fb997d9dfbd7ad0f4
Score10/10-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Adds Run key to start application
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-
- Target Michelines.All
- Size 56KB
- SHA256 a03bb54517df231824d324ad20b79094efef9af20eff855e30a6f459bcc43912
Score8/10-
Modifies Installed Components in the registry
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.