MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 22d2c6e1ba9b7b5a2b5b4a50cac76d1d5f67d47a358e4829df2335ae717540c9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 22d2c6e1ba9b7b5a2b5b4a50cac76d1d5f67d47a358e4829df2335ae717540c9
SHA3-384 hash: 4f1350cc158360f20b38a825dec778e6e25c76f15da8911213d4c64e08ecf0fe3c7b5ba8ed5966f313555ce14bce0e35
SHA1 hash: 364beb59fa24254e5805c9dc2916d7a50b8e052b
MD5 hash: c97e55aa3844827c5852174b426982fd
humanhash: sweet-blossom-four-vegan
File name:Specification Sheet_20201022_pdf.gz
Download: download sample
Signature GuLoader
Create hunting rule
File size:25'584 bytes
First seen:2020-10-21 09:57:00 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 768:U77iNlbnAWwJ6dJrroEguIOxaY9EEZ2WG:U6NlbnAFOOEVIdBEZ2WG
TLSH 08B2E03FC746222E3B0566BB53938AE72198AD10C6D91C25BE1C39FD371F249DD106EA
Reporter abuse_ch
Tags:GuLoader gz


Avatar
abuse_ch
Malspam distributing GuLoader:

HELO: mail-smail-vm50.hanmail.net
Sending IP: 203.133.180.238
From: (주) 해성테크 <oumingu@hanmail.net>
Subject: send product specification
Attachment: Specification Sheet_20201022_pdf.gz (contains "Specification Sheet_20201022.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
126
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/22d2c6e1ba9b7b5a2b5b4a50cac76d1d5f67d47a358e4829df2335ae717540c9/
Threat name:
Win32.Trojan.Vebzenpak
Create hunting rule
Status:
Malicious
First seen:
2020-10-21 02:00:13 UTC
AV detection:
15 of 29 (51.72%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=eljmnyn2tn5vuk23jjimvr3ndvpwpvd2gwheqko7em2244lvideq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

gz 22d2c6e1ba9b7b5a2b5b4a50cac76d1d5f67d47a358e4829df2335ae717540c9

(this sample)

GuLoader

Executable exe cabd27c6a3959d7f313b5e73679637c93fd21db0e6e6ee3e78a6d5e264068407

  
Dropping
MD5 8732c83a0c91ea1dbbeb0d5e98cf5844
  
Dropping
GuLoader
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 cabd27c6a3959d7f313b5e73679637c93fd21db0e6e6ee3e78a6d5e264068407

Comments