MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3b273143959d14746b0e9201d96265e348a2cf81216f5186adfbed66192da25b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3b273143959d14746b0e9201d96265e348a2cf81216f5186adfbed66192da25b
SHA3-384 hash: 1365f09cecccfdc373e8d7bc352e786b4b55d11f0c20de6de2543ef32be53fa8c73097faf71ad9c5f434ed5933b41b34
SHA1 hash: b4f6885e63bde2f8a847933278795dfde18afb23
MD5 hash: 07ca87f1c975675d9659efc1bdc5ae90
humanhash: apart-snake-eleven-bacon
File name:Doc14052020.ace
Download: download sample
Signature GuLoader
Create hunting rule
File size:23'343 bytes
First seen:2020-05-14 08:33:30 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 384:KZOvf7PV6cmr2DyGKJcQT3a98ba5ba5pi35NsqQ/uOMlk2kCRk9P4w:GEf7PAcmroD8eaa5+k35BQ/4C2bRkB
TLSH B2A2D11D6948EEFCD40F8FD28B96285F09385281EF2B4189AFA5C25FB7F074585C7245
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-14 03:51:37 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
15 of 31 (48.39%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

ace 3b273143959d14746b0e9201d96265e348a2cf81216f5186adfbed66192da25b

(this sample)

GuLoader

Executable exe 3ec48308cb3200731f34d1424d1724b17c1fb8b93af66b1597f7556ad335f5dd

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3ec48308cb3200731f34d1424d1724b17c1fb8b93af66b1597f7556ad335f5dd
  
Dropping
MD5 582cf1525cc52783a79d7b8e894d9def

Comments