MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e2e84e0580d1812fe04c00b4396e0b0429fb2b75970a850b1b37e1c7941b6a0f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e2e84e0580d1812fe04c00b4396e0b0429fb2b75970a850b1b37e1c7941b6a0f
SHA3-384 hash: 0a0fd6a0b9ad34d6312a84d8516b5680a74ad44a71e3cf5cbf0dfa15ae86f75721eff90ee345381ff90e8395e2b33543
SHA1 hash: ea8367d6c0071ca54380c6cbccc452b40c4db7f5
MD5 hash: 2d9e7c1662c90920eb52c16da7a1c6ff
humanhash: sad-equal-november-timing
File name:EvPO21-5-2021TY.zip
Download: download sample
Signature GuLoader
Create hunting rule
File size:26'832 bytes
First seen:2020-05-21 15:24:07 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 384:2ybFflmah86lOKhi49xaAj9g5pSZo5rpcaCdq0+fH5TRfIH2Wy8HRpoSBNFW8C:2ybFvh/Ed49Opb5rpcaEq1VO4v8C
TLSH D3C2E112B00A4491F9CE1CBBA0E9654A7BFEC05047CB915B997BB013EE4BC73ED19329
Reporter abuse_ch
Tags:GuLoader zip


Avatar
abuse_ch
Malspam distributing GuLoader:

HELO: captevrix.com
Sending IP: 156.96.59.92
From: Lim Phek Jin<hello@captevrix.com>
Reply-To: legitworld04@gmail.com
Subject: Evergreen Group Pte Ltd - Request For urgent PO/Quotation
Attachment: EvPO21-5-2021TY.zip (contains "EvPO21-5-2021TY.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Win32.Injector.EMBO.32466.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-21 15:35:44 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
24 of 48 (50.00%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

zip e2e84e0580d1812fe04c00b4396e0b0429fb2b75970a850b1b37e1c7941b6a0f

(this sample)

GuLoader

Executable exe 2f0607e123ec42fad4de746e00964b252574247289a31ec96e9c63e93ac683e7

  
Dropping
MD5 c95aac62951349689b82b3bd2a67bae0
  
Dropping
GuLoader
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2f0607e123ec42fad4de746e00964b252574247289a31ec96e9c63e93ac683e7

Comments