MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a6c9b8bb4fb07ba78a89f8267aee2d6bb5d815c0c866ecca46331e21c46411eb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence 1 File information 5 Yara Comments

SHA256 hash: a6c9b8bb4fb07ba78a89f8267aee2d6bb5d815c0c866ecca46331e21c46411eb
SHA1 hash: a8632f066f3db7d083ccabd588ecf46374723109
MD5 hash: 8e7a9c058289527b52a6c5497ef962fc
File name:SC_TR11670000.rar
Download: download sample
Signature GuLoader
File size:23'156 bytes
First seen:2020-05-22 09:56:32 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 384:DG3x0y7eW82VkItAWyUITzddFck4htMnpeDfnM32/fn80xWWoJ4Eoq+D60VqEeeO:S3x0yf82PeNZdF74hipeDPHn80MWoJ48
TLSH 11A2E1274C9AF905CB69F434C64BBC41E4AED83B7488DB139E93913C30B1D642DD6A64
Reporter @abuse_ch
Tags:GuLoader rar SCB

Malspam distributing GuLoader:

Sending IP:
From: Standard Chartered Bank<>
Subject: SUBJECT:Advice from Standard Chartered Bank
Attachment: SC_TR11670000.rar (contains "SC_TR11670000.exe")

GuLoader payload URL:


Mail intelligence
Trap location Impact
Global High
# of uploads 1
# of downloads 21
Origin country FR FR
ClamAV No detection
VirusTotal:Virustotal results 17.86%
ReversingLabs :No data

File information

The table below shows additional information about this malware sample such as delivery method and external references.



rar a6c9b8bb4fb07ba78a89f8267aee2d6bb5d815c0c866ecca46331e21c46411eb

(this sample)

Delivery method
Distributed via e-mail attachment