MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bbefca4819ed3b52a0645e5af635678a0b7290ffa6e5d0b3dfa1b38b30bf6c66. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: bbefca4819ed3b52a0645e5af635678a0b7290ffa6e5d0b3dfa1b38b30bf6c66
SHA3-384 hash: d19c81838e675f0c87ef12f37095a56bda430560492e0201eb47b6fe836541c28a532c482b8d22c0bbf84f852e658a5d
SHA1 hash: 136f4a4f45c26b91a4aa1d3adc6dadbf217520af
MD5 hash: 0b5b772fc0b9230370a65af587a559c7
humanhash: football-video-early-seventeen
File name:ARK-PSR-19-0703.rar
Download: download sample
Signature GuLoader
File size:28'085 bytes
First seen:2020-05-06 06:08:43 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 768:pNSnsveO0Fy2gvINcl4XnlvGq20t+8roWz:pNSnsvh0Y2ggNnnb20t+8vz
TLSH 1FC2E164638ACE4C6772EAD6BBAACD4705DC304207F6A85DF78108CC3F6931B4682866
Reporter jarumlus
Tags:GuLoader

Intelligence


File Origin
# of uploads :
1
# of downloads :
82
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Injector
Status:
Malicious
First seen:
2020-05-05 23:35:31 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
12 of 31 (38.71%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

rar bbefca4819ed3b52a0645e5af635678a0b7290ffa6e5d0b3dfa1b38b30bf6c66

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments