MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 2ed2a56967e7cb3e18b8b2cb910b9e6d356a52a9b65a05309c36ec62fa09773c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
GuLoader
Vendor detections: 4
| SHA256 hash: | 2ed2a56967e7cb3e18b8b2cb910b9e6d356a52a9b65a05309c36ec62fa09773c |
|---|---|
| SHA3-384 hash: | 762d677d49260b71588c83080a5f7c8dd61f4063f7eace28d578d525e13c7e098b30ed447f1c23f8a9dcb98acd86e455 |
| SHA1 hash: | 0dc1c71e232328839f7d6b3ac9151a7ff1576c63 |
| MD5 hash: | 6ee2e3f03f67bc69d29d14389bc62472 |
| humanhash: | finch-pizza-louisiana-nineteen |
| File name: | 6ee2e3f03f67bc69d29d14389bc62472.exe |
| Download: | download sample |
| Signature | GuLoader |
| File size: | 180'224 bytes |
| First seen: | 2020-06-03 13:05:13 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | add15931ffbd9980f7cff4263044c931 (1 x GuLoader) |
| ssdeep | 768:yMIhc7416N8lBR2zd4rZ5CNzFp3EaBe3rhB+pbNmnpvJrf7LtKUhpAt/Gd1sX8Zn:RIFO8lLDCH/B5eTvpAJGdQQDWuAxS |
| Threatray | 1'712 similar samples on MalwareBazaar |
| TLSH | 7304940BBA4CC74DE2108A71FA7642F51A64BF1BD842591FB5CCFE1E377021D28586EA |
| Reporter |  abuse_ch |
| Tags: | exe GuLoader |
abuse_ch
GuLoader payload URL:https://drive.google.com/uc?export=download&id=1eDEntQNxLgWiSTM2gWmzd68HHE_CSky_
Intelligence
File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Gathering data
Threat name:
Win32.Trojan.Injector
Status:
Malicious
First seen:
2020-06-03 17:35:15 UTC
AV detection:
19 of 31 (61.29%)
Threat level:
5/5
Detection(s):
Malicious file
Verdict:
malicious
Label(s):
guloader
Similar samples:
+ 1'702 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
5/10
Tags:
n/a
Behaviour
Suspicious use of SetWindowsHookEx
Suspicious use of NtSetInformationThreadHideFromDebugger
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.