MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 817c811faab405f73002edead5c5ff86167259524cd8038660cea13e5069c7bd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 817c811faab405f73002edead5c5ff86167259524cd8038660cea13e5069c7bd
SHA3-384 hash: d79a5797ed0dda3d120e79817d876063c408a0c9257e19778ed579fb5a1d70ca8ea418344ef2210ea41ae52dea716ee7
SHA1 hash: 4adeb22d7c9a5d899366e9328c13ee61e20d6036
MD5 hash: c98c62166a74f6a231dea468099c239a
humanhash: mobile-helium-low-king
File name:EXEL_FORM ORDER.gz
Download: download sample
Signature GuLoader
Create hunting rule
File size:30'751 bytes
First seen:2020-05-11 06:10:29 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 768:fR66iL/SUJLNtwXR8aDSMExne3cUkbth2DY:Z66ifJLEiXM+qkbaY
TLSH 3CD2E15BF92F036B043B7F24B9F1520C6076E7F4E9699E5C516C4321DA3316A8E70662
Reporter jarumlus
Tags:GuLoader

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Siggen9.45546.9654.21932.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-11 06:35:32 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
23 of 31 (74.19%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=qf6ich5kwqc7omac5xvnlrp7qylhewksjtmahbtaz2qt4udjy66q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

zip 817c811faab405f73002edead5c5ff86167259524cd8038660cea13e5069c7bd

(this sample)

GuLoader

Executable exe 58a209c5410be2ad71a8c3dd83168024de9b53bb799c4bc8bb5ff3bd97880d27

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 58a209c5410be2ad71a8c3dd83168024de9b53bb799c4bc8bb5ff3bd97880d27
  
Dropping
MD5 f8e22e5fe0c13a38cbe33de8cfab191d

Comments