General
- Target Zahteva za ponudbo – Katalog vzorcev.vbs
- Size 1007KB
- Sample240827-splwqsyfjp
- SHA256 cadf0601dc656d783b7bc3d1791387c68cc49ec44f6370bb5b2cf4b87243e4c4
Score
10/10
Malware Config
Targets
-
- Target Zahteva za ponudbo – Katalog vzorcev.vbs
- Size 1007KB
- SHA256 cadf0601dc656d783b7bc3d1791387c68cc49ec44f6370bb5b2cf4b87243e4c4
Score10/10-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext