VBShower

Description

(Trend Micro) VBShower delivers Cloud Atlas’ second-stage payload, a backdoor that uses WebDAV to communicate with a cloud storage service. More notably, VBShower also delivers a PowerShell-based implant named PowerShower, which is the main payload in Cloud Atlas’s previous routine.

Names

Name
VBShower

Category

Malware

Type

• Loader

Information

• https://www.trendmicro.com/vinfo/hk-en/security/news/cybercrime-and-digital-threats/cloud-atlas-group-updates-infection-chain-with-polymorphic-malware-to-evade-detection

Mitre Attack

• https://attack.mitre.org/software/S0442/

Other Information

Uuid

0ae44020-4336-4a13-828d-6d5cf4f1c025

Last Card Change

2022-12-30