MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2f92194ad19bcf59db524737bda991f0be0118e4e4165fb9fdaaa356354e9006. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2f92194ad19bcf59db524737bda991f0be0118e4e4165fb9fdaaa356354e9006
SHA3-384 hash: 18043c893cc1bf5740a80a8b161e9f5254762b7dcfd135b3c13e7d2a86165c08aa6a67edbd9e563fda262bff22186b9b
SHA1 hash: 551a039b7c324d51f50d1fdd405883a064147f58
MD5 hash: d407b133c971eaa410d4fca9665bef45
humanhash: delta-mirror-grey-freddie
File name:SLD-E2020-0002.rar
Download: download sample
Signature GuLoader
Create hunting rule
File size:84'690 bytes
First seen:2020-06-04 10:47:23 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 1536:2A1XMVI/2cB93FVqW8+fYV8Z7mihQ9ZxmGrqygRvaCIUttozEfB:vBYqPqJoYeZ7RhQjxm0qBRiz6tozE5
TLSH 8C8312462E1E936D4DD7E933014D959C9AFD80A35CA13E381E321E4E9C66F34B6787E0
Reporter abuse_ch
Tags:GuLoader rar


Avatar
abuse_ch
Malspam distributing GuLoader:

HELO: sungwon7.co
Sending IP: 111.90.158.36
From: Sebastian <sebastian@sungwon7.co>
Subject: Request For Quotation
Attachment: SLD-E2020-0002.rar (contains "SLD-E2020-0002.exe")

GuLoader payload URL:
https://drive.google.com/uc?export=download&id=1mX1l2_oFxUWTfSH-4lV8PMkWz3BOrDWf

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-04 11:35:49 UTC
AV detection:
16 of 31 (51.61%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=f6jbsswrtphvtw2si4333kmr6c7acghe4qlf7op5vkrvmnkosada._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

rar 2f92194ad19bcf59db524737bda991f0be0118e4e4165fb9fdaaa356354e9006

(this sample)

GuLoader

Executable exe e13acda03eb4829793beb5c0664d5752663b7ef5ae72b63724e7eaf189a9fec4

  
Dropping
MD5 4838cb92278ca4f09efc81a1c46ee493
  
Dropping
GuLoader
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e13acda03eb4829793beb5c0664d5752663b7ef5ae72b63724e7eaf189a9fec4

Comments