MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2332400f12db8642e6eab77dc0f9ff46bfe10c3963da975a765e68314c96f472. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2332400f12db8642e6eab77dc0f9ff46bfe10c3963da975a765e68314c96f472
SHA3-384 hash: 7cb653ae1c3f43dd765d83e5868f6534327e247a2033a8c33b899855b43e50232ccad40e7f4c165ecfa42726a859f0ff
SHA1 hash: e78a088d3715df17c51b4174de5e248aca515a5b
MD5 hash: 55f21d0f8d9b2f923979bd3592b003be
humanhash: georgia-fish-carbon-crazy
File name:ZTECHORDER2020.IMG
Download: download sample
Signature GuLoader
Create hunting rule
File size:1'769'472 bytes
First seen:2020-06-02 09:34:04 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:3qW2gu/kCX5Bq8WDCmKBU7Xvl6uZQuTy04CeO:67HkCXPq8WDmwXtRt74d
TLSH 4A85B2AAE0943B37F162163058665933DBE62C532AD4903AFD98FF49763DD7D2C010AE
Reporter abuse_ch
Tags:GuLoader img


Avatar
abuse_ch
Malspam distributing GuLoader:

HELO: bosmailout04.eigbox.net
Sending IP: 66.96.187.4
From: Khan Industries <design@allimportes.ga>
Reply-To: exportscoin@gmail.com
Subject: Re: procurement NO 5678 2020
Attachment: ZTECHORDER2020.IMG (contains "order2020.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-06-02 09:36:11 UTC
AV detection:
15 of 48 (31.25%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=emzeadys3odefzxkw564b6p7i276cdbzmpnjowtwlzudctew6rza._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

img 2332400f12db8642e6eab77dc0f9ff46bfe10c3963da975a765e68314c96f472

(this sample)

GuLoader

Executable exe 9188298a545444368a26d4d1fcc9be1e49ed55660891458d75c3dd5a2981c93b

  
Dropping
MD5 a8a17c0022eb380f2543bea8265d3f18
  
Dropping
GuLoader
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9188298a545444368a26d4d1fcc9be1e49ed55660891458d75c3dd5a2981c93b

Comments