MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 a88caf11b01cea311aca13b6e757a8974d5033e1acb8749b9d1951ed0d93d44c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
GuLoader
Vendor detections: 4
| SHA256 hash: | a88caf11b01cea311aca13b6e757a8974d5033e1acb8749b9d1951ed0d93d44c |
|---|---|
| SHA3-384 hash: | 46f9f42831bbced2775b220804699e8a9fbc729aecfb8d597ef47117fead32ba82b6cdd75ac31c1223b53a7d9c4ecad0 |
| SHA1 hash: | a09a2039fe462108c0719a1aa081000dc7526444 |
| MD5 hash: | d6d6756a8b5edb9299b912ef00cbebab |
| humanhash: | victor-wyoming-don-emma |
| File name: | REQUEST FOR QUOTATION FROM ---COMPANY.pdf.exe |
| Download: | download sample |
| Signature | GuLoader |
| File size: | 110'592 bytes |
| First seen: | 2020-06-05 19:34:59 UTC |
| Last seen: | 2020-06-05 21:00:54 UTC |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | c12c375f0c792d0f6c1264566470cd51 (1 x GuLoader) |
| ssdeep | 3072:9rdhegQlk4EduZjlWpwaNYHm123DUgoYAM:9qxlk4U+A |
| Threatray | 5'106 similar samples on MalwareBazaar |
| TLSH | 1DB3822BA959BC2CD1C97DF0BC15A89713163C15AB44A6BE52D0FBBCB630AE27C11707 |
| Reporter |  abuse_ch |
| Tags: | exe GuLoader |
abuse_ch
Malspam distributing GuLoader:HELO: mails.cesosenintl.ml
Sending IP: 193.142.59.85
From: Mr. Jacob <sanchezj@brightindustries.com>
Reply-To: sanchezj@brightindustries.com
Subject: REQUEST FOR QUOTATION FROM ---COMPANY
Attachment: REQUEST FOR QUOTATION FROM ---COMPANY.rar (contains "REQUEST FOR QUOTATION FROM ---COMPANY.pdf.exe")
GuLoader payload URL:
https://qif.ac.ke/anyii_DbAFfSTiIS190.bin
Intelligence
File Origin
# of uploads :
2
# of downloads :
88
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Detection(s):
Gathering data
Threat name:
Win32.Trojan.Vebzenpak
Status:
Malicious
First seen:
2020-06-05 19:36:07 UTC
AV detection:
23 of 31 (74.19%)
Threat level:
5/5
Detection(s):
Malicious file
Verdict:
malicious
Label(s):
guloader
Similar samples:
+ 5'096 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.