😈 [ Gi7w0rm, Gi7w0rm ]

Just released a new #blogpost, where I analyze the initial stages of a #vbs / #powershell based #GuLoader / #CloudEye infection.
Shoutout to @malware_traffic for being the first to find this sample (which I noticed after analyzing it myself ^^).

1/2

🔗 https://gi7w0rm.medium.com/cloudeye-from-lnk-to-shellcode-4b5f1d6d877

🐥 [ tweet ]