MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9ec589ea0e15696ee33a0670d46b57bbec340f3e286a5c0699e190e477489480. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9ec589ea0e15696ee33a0670d46b57bbec340f3e286a5c0699e190e477489480
SHA3-384 hash: 523c68a7da8d8ae2f7c03e9a7732e26eca3d7027e845d9301e7cc7d31f629086cbf90360243a4ca992933ff9c277f4ad
SHA1 hash: dda107a0065d292fbd3ca0405f07d005744a60df
MD5 hash: 660f92861d570c747f0f19060d93e383
humanhash: ceiling-yankee-washington-coffee
File name:DHL Consignment Details-pdf.gz
Download: download sample
Signature GuLoader
Create hunting rule
File size:58'432 bytes
First seen:2020-05-28 05:36:15 UTC
Last seen:Never
File type: gz
MIME type:application/gzip
ssdeep 1536:y/9Zw75huNad1bAculvfznD7dY+Rat9Vm+X2WvCUBzR9:E9C5hHK3LyEg9VyWvCyzR9
TLSH 0043F1ADB54778B3910ACE91A37194EB646E328104DF3A221D1CA1EEEC164D5EBB3173
Reporter cocaman
Tags:GuLoader gz


Avatar
cocaman
Malicious email
From: DHL Delivey Report<dhl@726.dlvtminio.casa>
Received: from mail0.726.dlvtminio.casa (mail0.726.dlvtminio.casa [139.59.41.250])
Date: Wed, 27 May 2020 15:19:12 -0700
Subject:
Attachment: DHL Consignment Details-pdf.gz

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Artemis1EE3AB8CCF23.14432.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Grp
Create hunting rule
Status:
Malicious
First seen:
2020-05-28 02:08:00 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
19 of 47 (40.43%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

gz 9ec589ea0e15696ee33a0670d46b57bbec340f3e286a5c0699e190e477489480

(this sample)

GuLoader

Executable exe 437c65b9b088d283a4f8de7395eb28a90b69462c81de7d287ff0f55ea85da219

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 437c65b9b088d283a4f8de7395eb28a90b69462c81de7d287ff0f55ea85da219
  
Dropping
GuLoader
  
Dropping
MD5 1ee3ab8ccf2389b9590fc987d41a4f5c

Comments