Skip to content
MalwareWiki

Malware

CloudEyE

aka GuLoader · vbdropper

CloudEyE (initially named GuLoader) is a small VB5/6 downloader.

CloudEyE, also known as GuLoader, vbdropper, is a Windows malware family.

Background

CloudEyE, first known as GuLoader, is a compact downloader built in VB5/6. It is generally used to pull down RATs and stealers, among them Agent Tesla, Arkei/Vidar, Formbook, Lokibot, Netwire and Remcos, frequently though not always hosted on Google Drive. The retrieved payload is XOR-encoded.

Source: Malpedia (Fraunhofer FKIE).