MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 0c2430af1c4b999dbe4534676db7718af6f44afb11335ff574bb82e38e637f9c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
GuLoader
Vendor detections: 4
| SHA256 hash: | 0c2430af1c4b999dbe4534676db7718af6f44afb11335ff574bb82e38e637f9c |
|---|---|
| SHA3-384 hash: | ea5d9425bc7ff7d10b989224486005252d5343efa8c848a1fe3c30e85eb98ac2e24ccb58cb5e611f2b50fb76124d26e0 |
| SHA1 hash: | 45214242c50d68e7f5cf490431bed26a6f9ed428 |
| MD5 hash: | 43e7002b315f2638f675c023e10623c0 |
| humanhash: | two-michigan-eight-nuts |
| File name: | Slagterhunden.exe |
| Download: | download sample |
| Signature | GuLoader |
| File size: | 81'920 bytes |
| First seen: | 2020-06-08 12:09:13 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | 241dcb41722e06547b9c4d8d52f22a3f (1 x GuLoader) |
| ssdeep | 1536:utaquRtSHmAUnaZXZria9cngIovwSyFRUcE5:utC5CggIoDh5 |
| Threatray | 5'798 similar samples on MalwareBazaar |
| TLSH | 7D838E17B994C506E0550A703CB3CBA92B667C2848406F4F2285BE5FF876B967C6B33D |
| Reporter |  abuse_ch |
| Tags: | exe GuLoader HostGator |
abuse_ch
Malspam distributing GuLoader:HELO: gateway9.unifiedlayer.com
Sending IP: 69.89.19.235
From: bahaa@abmaritime.com.jo
Subject: RE: Bank Details
Attachment: Bank Details.ARJ (contains "Slagterhunden.exe")
GuLoader payload URL:
https://drive.google.com/uc?export=download&id=15xPGmz8SkqXgoMEABNYey1kQvFJni_x2
Intelligence
File Origin
# of uploads :
1
# of downloads :
89
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Detection(s):
Gathering data
Threat name:
Win32.Infostealer.Fareit
Status:
Malicious
First seen:
2020-06-08 12:11:04 UTC
AV detection:
20 of 28 (71.43%)
Threat level:
5/5
Detection(s):
Malicious file
Verdict:
malicious
Label(s):
guloader
Similar samples:
+ 5'788 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.