MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 af69862f44d89836178d68c37024021a751b3a52b3a58b6faaf0711b7328a964. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: af69862f44d89836178d68c37024021a751b3a52b3a58b6faaf0711b7328a964
SHA3-384 hash: 51cbb5616caed5fb82c33e294334273f6d571389f2bac1080265aa971c7abf676311aefb478164e3148cd5fbbf42e676
SHA1 hash: 1bc1d1a726b6cdfc35a16fdc9afdac3f7acf5212
MD5 hash: f15ae02461fe594b65ab7c05d727fbea
humanhash: high-louisiana-white-oranges
File name:TNT Original Invoice.ace
Download: download sample
Signature GuLoader
Create hunting rule
File size:86'068 bytes
First seen:2020-06-04 15:34:27 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 1536:rFv97V9jj7r6QbhEEyCbUBBrUDomAdMT6XyaCnYScxZ:RvFTjeoRyrhdbpCcxZ
TLSH 318312CD95D5AE717FAD03C12D880EC49BB44902432A66AD74D239DF3283BCF17578AA
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25165.AceHeur.Scr.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-scr.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-04 15:35:49 UTC
AV detection:
12 of 31 (38.71%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

ace af69862f44d89836178d68c37024021a751b3a52b3a58b6faaf0711b7328a964

(this sample)

GuLoader

Executable exe e138e193f238741fd16716931cf287fbd71a927fa24dae8ec5eb46dca09f68f3

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e138e193f238741fd16716931cf287fbd71a927fa24dae8ec5eb46dca09f68f3
  
Dropping
MD5 5fd581753a9e266fd3c09f822fe78d8f

Comments