MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 91b5807df902ddbfe312194c46a6939e9f636354682ecffbd76aee1c96fcbaef. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 91b5807df902ddbfe312194c46a6939e9f636354682ecffbd76aee1c96fcbaef
SHA3-384 hash: f25af89261c1603194f8dc3f83b1a84c35067cf03e0029ad288865208ae837c4838bf9e44da772f4c985eae1024de319
SHA1 hash: 21cd4e7522cb9d3199216f059f4e6ec69bd46c34
MD5 hash: 21666a7e470bcd42688a1f9b5be9d0aa
humanhash: equal-floor-river-kentucky
File name:PI 56020-MAI spareparts.zip
Download: download sample
Signature GuLoader
Create hunting rule
File size:38'338 bytes
First seen:2020-05-08 18:32:49 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 768:tVgIocVZlRG8zohKPHtk4AG+rZVJ6abxGQbVXbQj8M8/3:tVtdRnHp+NVJPQwpQtO3
TLSH 0F03F1180DF7F21D0A2E8C7021499C4FD12ABE6EB26D1DDCB7C9BE9589350524B6CEC6
Reporter jarumlus
Tags:GuLoader

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.ProtectSharewar-2
Create hunting rule

PUA.Win.Packer.ProtectSharewar-3
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-05-08 16:14:54 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
20 of 48 (41.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=sg2ya7pzalo37yysdfgenjutt2pwgy2unaxm766xnlxbzfx4xlxq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

zip 91b5807df902ddbfe312194c46a6939e9f636354682ecffbd76aee1c96fcbaef

(this sample)

GuLoader

Executable exe 96568402add3b23971d79fa6730a1bd054509512e1d73cefec74c307aa46d436

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 96568402add3b23971d79fa6730a1bd054509512e1d73cefec74c307aa46d436
  
Dropping
MD5 604cfd460f8a0c116cd9f6f0ed1a2936

Comments