MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4ebf31ee723bf829896b97ed1d46450618ab9983e60d515d92b0fe6c04a340ba. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4ebf31ee723bf829896b97ed1d46450618ab9983e60d515d92b0fe6c04a340ba
SHA3-384 hash: 737636f1c0dd52f91f51144caf7e377603036f4132c7ef9c09b78fe09888ad4af64a8b2068fbb59d9f8c40c0ac588a5b
SHA1 hash: 653de7f51c462010f78dfb63608fc06197c3dd55
MD5 hash: b3c37d3b4e986be26e127d1d3b0cef13
humanhash: queen-magnesium-foxtrot-victor
File name:CI-BL202006-10.jpg.ace
Download: download sample
Signature GuLoader
Create hunting rule
File size:30'674 bytes
First seen:2020-06-10 04:40:38 UTC
Last seen:2020-06-10 13:59:56 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 768:2by+VHU/hF5QxLQ3Dvmf8N08Gj0DtZPG9lyHw+WIlSed:qBVHU/9uQ3bmajGj+ZIYHw+hlBd
TLSH 76D2E11EEE87C35C7BC266ED69FE308E924351548098A241DE204D7BB1BFE5E3B1C816
Reporter jarumlus

Intelligence

File Origin
# of uploads :
3
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-10 04:42:05 UTC
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

ace 4ebf31ee723bf829896b97ed1d46450618ab9983e60d515d92b0fe6c04a340ba

(this sample)

GuLoader

Executable exe 9381fe0c3cf875295a8f591384aa265f7055886439c2f6879dd31585b7c7e8fc

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9381fe0c3cf875295a8f591384aa265f7055886439c2f6879dd31585b7c7e8fc
  
Dropping
MD5 0c20e160f37e9433adfc2dc5351a2571

Comments