MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3db81c7fb2db2fed5c006a30c124eeed49e402cd6b4266cd4679e34c7847ba7d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 3db81c7fb2db2fed5c006a30c124eeed49e402cd6b4266cd4679e34c7847ba7d
SHA3-384 hash: f85769a9d46f7675107f5fdf3d7f64b92e0b14066888784f721c65fb00dc42c612d4a49f83d6a9555321023831a492f5
SHA1 hash: e4a2b666af31c4d559764ded4ff0068dde4ce5ef
MD5 hash: 78ad0b823c0e5e0ee41d25fb1fbff49c
humanhash: fourteen-timing-timing-item
File name:Payment Copy_EUR 59048.rar
Download: download sample
Signature GuLoader
File size:33'181 bytes
First seen:2020-03-24 05:27:27 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 768:F56pf7T69fmQl3lkbvp0U3rYm2jp2qL5EPKSQl4Y8rz7P7QRTBOpL:F56pDTEfmSE0Cr8jJuySQl4fc6
TLSH 3EE2E1F81A373E7EFA3D1DC11D0AE57979532C299C1612ECC9275813488ADB1F855783
Reporter cocaman
Tags:rar

Intelligence


File Origin
# of uploads :
1
# of downloads :
74
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Fareit
Status:
Malicious
First seen:
2020-03-23 20:12:41 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
18 of 31 (58.06%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

rar 3db81c7fb2db2fed5c006a30c124eeed49e402cd6b4266cd4679e34c7847ba7d

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments