General
- Target e4230c844861c8285ebe2536d7d34c8febef3a12b8092db1c496911eb315a1a6
- Size 10KB
- Sample240923-te2d4svenb
- SHA256 e4230c844861c8285ebe2536d7d34c8febef3a12b8092db1c496911eb315a1a6
Score
10/10
Malware Config
Targets
-
- Target SOLICITUD DE OFERTA_23-09-2024·pdf.vbs
- Size 28KB
- SHA256 8d3fcc51b8c2c9a5dbef3cb0575df9e31319492fc94ccb681cfc4ebc0dba7905
Score10/10-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Legitimate hosting services abused for malware hosting/C2
-
Network Service Discovery
Attempt to gather information on host's network.
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext