MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 347da016f0ba6bded32111d802223f1ef672c30b5f7ff9d0fb2567c8c6e655ee. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 347da016f0ba6bded32111d802223f1ef672c30b5f7ff9d0fb2567c8c6e655ee
SHA3-384 hash: b766a2f4fa5e84eb92d9e3a73c11fa27fd50ba376ef413633dfac9eaa7a03f9adc44dab84c88c5068afaab57bf925071
SHA1 hash: f8ea6188ae48511013ecc79765988fd794689555
MD5 hash: 7432b5c459dce11a2a8daceffa489957
humanhash: ack-edward-finch-vegan
File name:Invoice No. 4813696.zip
Download: download sample
Signature GuLoader
Create hunting rule
File size:631'656 bytes
First seen:2020-05-12 13:36:27 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:VlB28EvDrgxRDTaFaPd51EC37cN129n28K6YtC5ZGGotC0pTGYDmmaxcD5xrw51J:3B2jMXoWpz7cih1MGQC0pmcPwJ
TLSH 16D423A8F145B2965ECC58984411BC397FA90F1A5F7F6C83C5BEBA06E61F813816E343
Reporter jarumlus
Tags:GuLoader

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.AutoIT-3.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.27686.AidExe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.PSW.Agent.BORA.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.24146.ZipHeur.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.24016.ZipHeur.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.21103.ZipHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-12 14:35:34 UTC
File Type:
Binary (Archive)
Extracted files:
27
AV detection:
30 of 48 (62.50%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=gr62afxqxjv55uzbchmaeir7d33hfqyll577tuh3evt4rrxgkxxa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

zip 347da016f0ba6bded32111d802223f1ef672c30b5f7ff9d0fb2567c8c6e655ee

(this sample)

GuLoader

Executable exe a4c9485c1fc597e651e339316265c457865812f656b5cbc3595bdf54f8eb6623

  
Dropped by
GuLoader
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a4c9485c1fc597e651e339316265c457865812f656b5cbc3595bdf54f8eb6623
  
Dropping
MD5 0e718d6c722a0c79e61689da0a4830a1

Comments