MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 126a93f721f1c97af265ba37d3b6be265922a7d4540b3bd8c40cdd2e90205d53. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 126a93f721f1c97af265ba37d3b6be265922a7d4540b3bd8c40cdd2e90205d53
SHA3-384 hash: 0e9b2367377cc8d419da25fe65fd9e28fcf1cac8b4d0a0f75da3334b89c07d08f0bfa4c3f68c4e7172990e1bd0cd2aca
SHA1 hash: 42c5b2e4d587fdb098db37a8ffd2e22228839b14
MD5 hash: 51093bf1f531e980276ffbaeeec8bd0b
humanhash: magazine-uniform-purple-maryland
File name:Presupuesto 20182.TAR
Download: download sample
Signature GuLoader
Create hunting rule
File size:33'411 bytes
First seen:2020-06-11 06:32:10 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 768:iXUuCQhKHbQoGsSkp67R2ZdC0gQGpVsbmIBpZTXl2pycb8buUa:iEuCgKHbrpSW67cZdbPispBpRXb1a
TLSH A0E2E143A01BA631BDCFE2B4ED6859F4AD1086C3ECE45165CD7847A2ACE4AE578D0A70
Reporter abuse_ch
Tags:GuLoader tar


Avatar
abuse_ch
Malspam distributing GuLoader:

HELO: psm91.troy
Sending IP: 2.56.8.190
From: pedidos@tesslibrenta.com
Subject: Presupuesto 20182
Attachment: Presupuesto 20182.TAR (contains "Presupuesto 20182.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
149
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Vebzenpak
Create hunting rule
Status:
Malicious
First seen:
2020-06-11 06:34:07 UTC
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=cjvjh5zb6hexv4tfxi35hnv6ezmsfj6ukqftxwgebtos5ebalvjq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

rar 126a93f721f1c97af265ba37d3b6be265922a7d4540b3bd8c40cdd2e90205d53

(this sample)

GuLoader

Executable exe 2cb2d3d6e9eae7df795b4c26fe1e27906e12b0d3d9bbec8c6829abadfb8694af

  
Dropping
MD5 c421ddb7441d68aa54d7ccc5f2ca49c6
  
Dropping
GuLoader
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2cb2d3d6e9eae7df795b4c26fe1e27906e12b0d3d9bbec8c6829abadfb8694af

Comments