MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7f778b8e3a796983fed9752ce588632eaefcd06d0ddc0eb346869829a14fdd00. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence 1 File information 4 Yara Comments

SHA256 hash: 7f778b8e3a796983fed9752ce588632eaefcd06d0ddc0eb346869829a14fdd00
SHA1 hash: c3220c28e4645539f71021c52314546af3a70fa6
MD5 hash: 0a537d6cda15fd1f2e99ba2ac41188ee
File name:beneficiary details.bat
Download: download sample
Signature GuLoader
File size:90'112 bytes
First seen:2020-05-22 09:57:40 UTC
Last seen:2020-05-22 10:52:06 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash b3bfc43fde343d8f3410181af51938ab
ssdeep 768:l6G4AckBsLVwsjDW4hxMSTjG3/HNApFmsF+awYO2Su6A:VKyGVwmWsxvnGvNqFZFXl
TLSH EC932904B55CECE3D9108EF289124A8C55EFBD701D948B1B34DE3B2C693628659F93AF
Reporter @abuse_ch
Tags:bat GuLoader


Twitter
@abuse_ch
Malspam distributing GuLoader:

HELO: lpbindia.com
Sending IP: 37.49.230.204
From: "Michelle Adalbert" <gautam.maity@lpbindia.com>
Subject: PAYMENT SWIFT
Attachment: beneficiary details.Z (contains "beneficiary details.bat")

GuLoader payload URL:
https://drive.google.com/uc?export=download&id=1F-2XEdYtJcqVZCfE7hiWB125f8fzm-5d

Intelligence


Mail intelligence
Trap location Impact
Global Low
# of uploads 2
# of downloads 22
Origin country FR FR
ClamAV SecuriteInfo.com.Trojan.GenericKD.33883016.10633.30031.UNOFFICIAL
VirusTotal:Virustotal results 14.49%

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

Executable exe 7f778b8e3a796983fed9752ce588632eaefcd06d0ddc0eb346869829a14fdd00

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments