MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b9df2f1b0af14abe76816fd4bdbced790b358bfdf1147386e5c1ce5f1e83c6af. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b9df2f1b0af14abe76816fd4bdbced790b358bfdf1147386e5c1ce5f1e83c6af
SHA3-384 hash: f766038655db267c5332a4d28907597b80ed3d68cb02002c5ba1be6746377d97d8be007f128f26aa85ae7b048613b52f
SHA1 hash: 99c9ca1b0d941a496cb456fc970c3ed23db7d86f
MD5 hash: fdf4ef6f187603b02d9c600c6d5e082c
humanhash: high-tango-hamper-failed
File name:HSBC Payment Copy_Pdf____________________________________________.iso
Download: download sample
Signature GuLoader
Create hunting rule
File size:163'840 bytes
First seen:2020-04-09 14:01:52 UTC
Last seen:2020-04-09 14:29:52 UTC
File type: iso
MIME type:application/x-iso9660-image
ssdeep 768:12t0d7C3YjE9MJMf9gfwMQ+BxAZqCUdICuMlj:rd7C3wswa3uDAZqzv
TLSH 87F3E7517A40FD9AD01806728AB5C2BC4526BC348EA5674778CD3F2F3BB78A27842F57
Reporter cocaman
Tags:GuLoader iso

Intelligence

File Origin
# of uploads :
2
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.DownLoader33.29609.29558.22636.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-04-09 14:35:48 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=xhps6gyk6ffl45ubn7kl3phnpeftlc756ekhhbxfyhhf6hudy2xq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

iso b9df2f1b0af14abe76816fd4bdbced790b358bfdf1147386e5c1ce5f1e83c6af

(this sample)

AgentTesla

Executable exe 5841754eb3bf70c6eebd7e95b270cff96fb86d370f031b6430af922c99364722

GuLoader

Executable exe 133531deb093f5e5684d02dd919901e8cb5369b81f9a36ef919451bf02555e55

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 133531deb093f5e5684d02dd919901e8cb5369b81f9a36ef919451bf02555e55

Comments