MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 77386776e40532cd9d96b17ddc16eb63cb3effb53858763f4e4f0c55b96158e0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 77386776e40532cd9d96b17ddc16eb63cb3effb53858763f4e4f0c55b96158e0
SHA3-384 hash: 6b9e0fe1507ac09561ebaebd24a5de9d30f383784aa8224143f420c63a5a15bd937650602e1b443ccee46056133a865b
SHA1 hash: 4ff47c29ede549fa6dae0ef15290fbf2515dce24
MD5 hash: 53c36f8db33e033b932fe1cd5ed8653a
humanhash: equal-maryland-music-east
File name:53c36f8db33e033b932fe1cd5ed8653a.exe
Download: download sample
Signature GuLoader
Create hunting rule
File size:110'592 bytes
First seen:2020-05-03 08:13:37 UTC
Last seen:2020-05-03 16:52:24 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash cca233e53f57a2b88751d365209fb1b0 (1 x Amadey, 1 x GuLoader)
ssdeep 768:7rGAZfmtXJJ55oywrDXjwaHdeGofYwSb8m2da6SIMyn66A+xA:PGautXJJ55NaLjfnMmYaRby6ux
Threatray 83 similar samples on MalwareBazaar
TLSH 71B350E032F84DD6E729967E49A7DA21617CF9E447838F43027478769F22F8239D061A
Reporter abuse_ch
Tags:Amadey exe GuLoader

Intelligence

File Origin
# of uploads :
3
# of downloads :
343
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Win.Malware.Generickdz-6907156-0
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Deyma
Create hunting rule
Status:
Malicious
First seen:
2020-05-03 01:38:00 UTC
File Type:
PE (Exe)
Extracted files:
4
AV detection:
25 of 31 (80.65%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=o44go5xeauzm3hmwwf65yfxlmpft575vhbmhmp2oj4gflolbldqa._file
Verdict:
malicious
Label(s):
guloader
Create hunting rule
Similar samples:
1b161b9398f1f28f73c9bfaa6b536cc8bd49d1de076d78404f9a1fe181ec02b7
GuLoader
1cd2e3b696656354859e0ffdb5bca866fadf42f59c9e2da1c228e0b52fa5f368
GuLoader
1ede635c9e8e470e911dc46b40300cd2e794703cedd0f5487d9677244864741f
GuLoader
70399b135fa0365dae66a01b072dd8614be73c7ff2b4cc51caeeef64dfc60ef5
GuLoader
7cbc380c05ce0b8e7ff6c94ee11ac6aec99adfb14e530f43d895af660588e984
GuLoader
8780cfbde0db4996b68e320d9d2576f39a2d7f99a8ed60ba0c4e543f17801bd9
GuLoader
9809e7b9ac68c6e45309bbaa600829cb8ff32a48002ca799aaa8005f7e21f262
GuLoader
9848da60b74c19523583a237900008a3fcb268a9a4000c352f944f7d9f0d78e3
GuLoader
b022be4adc35569368e23da7b344c4f9a4ce9efffaf1013d1fc778cb2b58f67f
GuLoader
df34eee3a23ae66bb689bc1911e417cdaa7b51c353dc586bdb3280f86df09b55
GuLoader
+ 73 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

GuLoader

Executable exe 77386776e40532cd9d96b17ddc16eb63cb3effb53858763f4e4f0c55b96158e0

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/356531/
  
Delivery method
Distributed via web download

Comments