General
- Target Chq book 004237.vbe
- Size 7KB
- Sample240509-jskcmsbb24
- SHA256 233bdd39cf60503957deb8d48b136fd78e2a7e435929ba4710d2e767509d50a0
Score
10/10
Malware Config
Targets
-
- Target Chq book 004237.vbe
- Size 7KB
- SHA256 233bdd39cf60503957deb8d48b136fd78e2a7e435929ba4710d2e767509d50a0
Score10/10-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext