MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9b424c556dc46aed0946b4e919ba0f0a8905ac7d0a6ff33c82f5e795b6c324fc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence 1 File information 5 Yara Comments

SHA256 hash: 9b424c556dc46aed0946b4e919ba0f0a8905ac7d0a6ff33c82f5e795b6c324fc
SHA1 hash: 517fa5752465d9d2602566360dea07510c997fcd
MD5 hash: 73839b60a129ee62c874929024b569ea
File name:INVOICE.r00
Download: download sample
Signature GuLoader
File size:23'733 bytes
First seen:2020-05-22 10:19:08 UTC
Last seen:Never
File type: r00
MIME type:application/x-rar
ssdeep 384:bMjftvdoHQDS7VDbU45TprKqgZoWz0udZuCHmRrAjohu43Fbm+60M/S0TXUeoICt:iDoHmS7VDbUqTprK/Z0uruCHsU0uEoT8
TLSH 8EB2E0392FE6A2922EF13A44B6841788F1474214E3F5C4D5CAB359D72F1B478394E1FA
Reporter @abuse_ch
Tags:GuLoader r00


Twitter
@abuse_ch
Malspam distributing GuLoader:

HELO: seed.net.tw
Sending IP: 139.175.54.24
From: Mauricio Mier <mamier@eldorado.com.uy>
Subject: SIGNED INVOICE
Attachment: INVOICE.r00 (contains "INVOICE.exe")

GuLoader payload URL:
https://drive.google.com/uc?export=download&id=1czd409N3punnxOPYasYBPh1On5hUEnTu

Intelligence


Mail intelligence
Trap location Impact
Global Low
# of uploads 1
# of downloads 23
Origin country FR FR
ClamAV No detection
VirusTotal:Virustotal results 17.74%

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

r00 9b424c556dc46aed0946b4e919ba0f0a8905ac7d0a6ff33c82f5e795b6c324fc

(this sample)

  
Dropping
GuLoader
  
Delivery method
Distributed via e-mail attachment

Comments