MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a803b1e1ce53a82ff53daa293131a7544208f5d308457a968013e4e6fcd841e2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: a803b1e1ce53a82ff53daa293131a7544208f5d308457a968013e4e6fcd841e2
SHA3-384 hash: 55cb9a44dcbc208da6672ad1d1d73c57ae4a7c0242660df8ae5d2477103eeb95544560245c26f06835d2ed36bdede9a7
SHA1 hash: 1bfacff217242ad9ab63e37dd1b9f9a826bac32e
MD5 hash: bfa9b2f397cebea97777642ca25aa69e
humanhash: triple-red-sodium-black
File name:Product Inquiry.zip
Download: download sample
Signature GuLoader
File size:30'638 bytes
First seen:2020-05-18 14:02:09 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 768:PEoXKUo+6O6JWL14s1vmn3syon6SMtk1+/eMOdn13zUq:PEoa065JWR4sM8ye69O0OvzUq
TLSH 16D2E1DFC546A04FC3078AE290C15B7778A16DFBD022BD1D599205AB81F85B88B67CDC
Reporter jarumlus
Tags:GuLoader

Intelligence


File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Fareit
Status:
Malicious
First seen:
2020-05-18 14:58:56 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
25 of 47 (53.19%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

zip a803b1e1ce53a82ff53daa293131a7544208f5d308457a968013e4e6fcd841e2

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments