MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2089ca82a514b0739c0b6201fdcfff92dd8f9d9dfd84d3e015b1e4543e60ac1c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence 1 File information 5 Yara Comments

SHA256 hash: 2089ca82a514b0739c0b6201fdcfff92dd8f9d9dfd84d3e015b1e4543e60ac1c
SHA1 hash: ce9272e3d1b8f5b90f1de09fecb3362fe25a631b
MD5 hash: 3960108bb3b44f6a656a387d6373b9a4
File name:beneficiary details.Z
Download: download sample
Signature n/a
File size:22'894 bytes
First seen:2020-05-22 09:57:39 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 384:FdKQ9ZnuLCkF3R7b3jpiuHUun00oNekfoOSqM6gvE54PT35K1uh2WqBMrUvCB:F19s9zjpiuH+5NXfrSP6dYQ1ukWqBCrB
TLSH 0BA2D12EC3AD8EBE8976E2C64D0DED26A0931185E3D1C5655C337C38E6D22895338641
Reporter @abuse_ch
Tags:GuLoader z


Twitter
@abuse_ch
Malspam distributing GuLoader:

HELO: lpbindia.com
Sending IP: 37.49.230.204
From: "Michelle Adalbert" <gautam.maity@lpbindia.com>
Subject: PAYMENT SWIFT
Attachment: beneficiary details.Z (contains "beneficiary details.bat")

GuLoader payload URL:
https://drive.google.com/uc?export=download&id=1F-2XEdYtJcqVZCfE7hiWB125f8fzm-5d

Intelligence


Mail intelligence
Trap location Impact
Global High
# of uploads 1
# of downloads 23
Origin country FR FR
ClamAV No detection
VirusTotal:Virustotal results 35.48%

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

z 2089ca82a514b0739c0b6201fdcfff92dd8f9d9dfd84d3e015b1e4543e60ac1c

(this sample)

  
Dropping
GuLoader
  
Delivery method
Distributed via e-mail attachment

Comments