MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2d26598c65a56fec5e7fc62d95b04d2973121c5fbc94d83fc587231e271ddf08. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2d26598c65a56fec5e7fc62d95b04d2973121c5fbc94d83fc587231e271ddf08
SHA3-384 hash:	0fb9f45477453e891b94873ced72bb9da5fdd91a3ba1f75feef2a9d625e37a70b9a7b522fcc74442c4a911c02c2324e2
SHA1 hash:	113b6a9fd585fdc714a98f8c9f941cf9777cb42e
MD5 hash:	a44a5817fd49b5a01f284dc70b30957c
humanhash:	nitrogen-minnesota-victor-montana
File name:	OUR-DEPOSIT-COPY.UUE
Download:	download sample
Signature	GuLoader Alert Create hunting rule
File size:	915'926 bytes
First seen:	2026-05-20 17:29:42 UTC
Last seen:	Never
File type:	uue
MIME type:	application/x-rar
ssdeep	24576:nK61ItKpITFc1KG0oQf0yle5qq0pFOW/sV+k:nKrxFehZqqSSh
TLSH	T191153348EEDF59681F290FB4A9043DAE301EADE673A75BE3094B96132F2794CB1C9444
TrID	58.3% (.RAR) RAR compressed archive (v-4.x) (7000/1) 41.6% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	GuLoader uue

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

26

Origin country :

CH

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/70698b68-c9d2-4f01-b1af-c21f18818b6f/

ClamAV Detected

Detection(s):

SecuriteInfo.com.NSIS.MalwareX-gen.75637554.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Trojan.Inject6.4217.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a0dfa1c4159ce11f601d9c7

Tags:

injection virus blic

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

adaptive-context anti-debug evasive installer installer installer-heuristic microsoft_visual_cc nsis reconnaissance signed

Link:

https://www.filescan.io/uploads/6a0df2e6875badc3b38eb472/reports/e8a8dea4-216b-4998-93c9-54136652ac13/overview

Hybrid Analysis Malicious

Verdict:

Malicious

Link:

https://www.hybrid-analysis.com/sample/2d26598c65a56fec5e7fc62d95b04d2973121c5fbc94d83fc587231e271ddf08

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2025-09-24T16:42:00Z UTC

Last seen:

2026-05-21T02:31:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/2d26598c65a56fec5e7fc62d95b04d2973121c5fbc94d83fc587231e271ddf08/results?tab=lookup

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2d26598c65a56fec5e7fc62d95b04d2973121c5fbc94d83fc587231e271ddf08/

ReversingLabs TitaniumCloud Win32.Trojan.GuLoader

Threat name:

Win32.Trojan.GuLoader

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-09-24 08:24:31 UTC

File Type:

Binary (Archive)

Extracted files:

21

AV detection:

18 of 24 (75.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=futftddfuvx6yxt7yywzlmcnffzrehc7xsknqp6fq4rr4jy534ea._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/2d26598c65a56fec5e7fc62d95b04d2973121c5fbc94d83fc587231e271ddf08