MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 86cfb86b54c8aa166bd969dfce431459792f24536c6c3277869a83334893e7de. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 86cfb86b54c8aa166bd969dfce431459792f24536c6c3277869a83334893e7de
SHA3-384 hash: eefde6d8409c9f1ee95f7d0acec40290842dc3895a193fb794965b4ac9820523a522c0d37038f6c82f84a27f8e0f169e
SHA1 hash: df953fc4e5d378b4e61d8ad6b362b78be5c7bc6a
MD5 hash: 04fecc967999a191e734adac628a237a
humanhash: robert-shade-indigo-foxtrot
File name:Payment Advice.ace
Download: download sample
Signature GuLoader
Create hunting rule
File size:30'662 bytes
First seen:2020-06-10 05:30:31 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 768:mcfPm4mYoPE4WuNvkMuotksQnLng6K0SjxmpTFR7p:m77zPzNvk1sn70pTFR7p
TLSH D4D2F2642EC7E8E22A477101A3B3AB2538CB72CD3527989509FAC0569363110BFFD977
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25165.AceHeur.Scr.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-scr.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Vebzenpak
Create hunting rule
Status:
Malicious
First seen:
2020-06-10 05:32:05 UTC
AV detection:
16 of 27 (59.26%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

ace 86cfb86b54c8aa166bd969dfce431459792f24536c6c3277869a83334893e7de

(this sample)

GuLoader

Executable exe 3bce2cb71450f3924688d64791d70feaa8a49e25784d3d64451b3b1d2d25cdbf

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3bce2cb71450f3924688d64791d70feaa8a49e25784d3d64451b3b1d2d25cdbf
  
Dropping
MD5 3d812028d1c05c64a8cf8018e1b9deb0

Comments