MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5a78dfa06caa6a1125cd2c29d01fbbea0c2062a3c52a4f70dde3174c1ebfddaa. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5a78dfa06caa6a1125cd2c29d01fbbea0c2062a3c52a4f70dde3174c1ebfddaa
SHA3-384 hash: 068dd561324f0944a94846dcc523668196beb31cdd9343071a4d8b7c18fa58ca782e060d60645e7e1688f8124d231673
SHA1 hash: d8969bf0d572fd011dbd05aa6216f69f463abbfe
MD5 hash: 0e5e9efb770cb0e50483e47b9c68791d
humanhash: timing-kitten-eleven-princess
File name:Payment Advice.ace
Download: download sample
Signature GuLoader
Create hunting rule
File size:40'734 bytes
First seen:2020-06-09 04:16:38 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 768:ONMdTqv4v+K56HQXKQrLgTKHXSu669U5Cp2ZPiwi5D9leWBXIf4wpsyG0:ccTqvwUHQpXt9UwAU5DjBuR
TLSH 7403F15C8FD2E932B338ED5BBA9F911E389586F3D058DCD45F806E710145929E50F893
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25165.AceHeur.Scr.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-scr.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Vebzenpak
Create hunting rule
Status:
Malicious
First seen:
2020-06-09 04:18:06 UTC
AV detection:
18 of 31 (58.06%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

ace 5a78dfa06caa6a1125cd2c29d01fbbea0c2062a3c52a4f70dde3174c1ebfddaa

(this sample)

GuLoader

Executable exe 1429990eae383b4fe77004519357e8844c118790f51a5f471c2cac517c07a4fe

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 1429990eae383b4fe77004519357e8844c118790f51a5f471c2cac517c07a4fe
  
Dropping
MD5 5dfbf890492874eb91560ed0f0ce4030

Comments