General
- Target PolysealsSdnBhdStatementReceipts1111.exe
- Size 674KB
- Sample241111-vzb6dsseqh
- SHA256 18bfaa34bea9797ca82ffa02adc900f70ad24ad9663afacf0d963ff41d3a0c17
Score
10/10
Malware Config
Targets
-
- Target PolysealsSdnBhdStatementReceipts1111.exe
- Size 674KB
- SHA256 18bfaa34bea9797ca82ffa02adc900f70ad24ad9663afacf0d963ff41d3a0c17
Score10/10-
Guloader family
-
Guloader,Cloudeye
A shellcode based downloader first seen in 2020.
-
Loads dropped DLL
-
Adds Run key to start application
-
Blocklisted process makes network request
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
Score3/10