MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9b2b9e919208b2a601565e3fb9f358c551536c08b7ca733cdcd0b0bde37a7688. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



GootLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 9b2b9e919208b2a601565e3fb9f358c551536c08b7ca733cdcd0b0bde37a7688
SHA3-384 hash: a644de648ed266e715d3a301a6018804c40e1184a28942bfdd85f747bb91de2e0c07612da79ff843089ad84cbc7348e2
SHA1 hash: 168656d72016ce37aa1bd48a279e9c2a10b80385
MD5 hash: 23938a5f1a8d0740d7c84ade1ad886a2
humanhash: delaware-triple-glucose-iowa
File name:Legal_Case_Management_Guide_2025.zip
Download: download sample
Signature GootLoader
File size:80'978'728 bytes
First seen:2025-12-30 17:15:30 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 98304:zVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVb:r
TLSH T1120802AA63A1D8ED45151C70B725245975C938ECF2E3F33C582656DCE7982BB2B0A333
Magika zip
Reporter monitorsg
Tags:GootLoader zip

Intelligence


File Origin
# of uploads :
1
# of downloads :
38
Origin country :
US US
Vendor Threat Intelligence
Gathering data
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

GootLoader

zip 9b2b9e919208b2a601565e3fb9f358c551536c08b7ca733cdcd0b0bde37a7688

(this sample)

  
Delivery method
Distributed via web download

Comments