MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8d3491ca5717d8c73f9ebd89d61d8e5fb0a8591f7694acf8c037f4874940970d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8d3491ca5717d8c73f9ebd89d61d8e5fb0a8591f7694acf8c037f4874940970d
SHA3-384 hash: e3ad3504fffa1fc1bc246ab35aa9e8e0a7b84fc64d1051e620b573beb209d8d5ff28c269bed415f0888f95f1defeaf3a
SHA1 hash: a80181cfe3ef88518a01d9d99e741de38952aaee
MD5 hash: 217336f88d8ea29e2831de086d41e605
humanhash: rugby-mobile-uranus-blossom
File name:Swift Codes Of Invoices 32,33,35,36 &37.pdf.7z
Download: download sample
Signature GuLoader
Create hunting rule
File size:20'684 bytes
First seen:2020-05-12 11:10:49 UTC
Last seen:Never
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 384:BmEYwB8nxF/bsDifA+WZ/yEALOMRZowzjKg9wubIO5jmUCSOpnPBhE:BmaByID7+up8lSOrqucO5BCS6Y
TLSH ED92E1404CFE82F1C5D22F627BECB7F25326DC24E6486F032DB01AAA7C0A62502194FD
Reporter cocaman
Tags:7z


Avatar
cocaman
Malicious email
From: "Eng.Amjad Al.Rasheed" <support@dassd.co.uk>
Received: from box.dassd.co.uk (box.dassd.co.uk [192.119.106.178])
Date: Tue, 12 May 2020 11:09:42 +0100
Subject: Re: Swift Codes Of Invoices 32,33,35,36 and 37
Attachment: Swift Codes Of Invoices 32,33,35,36 &37.pdf.7z

Intelligence

File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-12 11:36:08 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
20 of 47 (42.55%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

7z 8d3491ca5717d8c73f9ebd89d61d8e5fb0a8591f7694acf8c037f4874940970d

(this sample)

GuLoader

Executable exe c7126e6559d14c8a6e6502c038b71d2748ea77b6b977134615043e1576770818

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c7126e6559d14c8a6e6502c038b71d2748ea77b6b977134615043e1576770818

Comments