MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bfb21a94283a7176a0c97198b3e3bd371c064b941da2ca0804d1d2abc1a9eca6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: bfb21a94283a7176a0c97198b3e3bd371c064b941da2ca0804d1d2abc1a9eca6
SHA3-384 hash: 198984e6a1c46e53f5e08004a194bc1ec1d30ba392d85fa1ca8d19cf587ad72aaca783d2e5d79596019cf146ee2a7b45
SHA1 hash: 37a961f8584e1dd44cb721b2f51dc8636caf79c3
MD5 hash: f753a21a5cb154357b4d8c592a8265f7
humanhash: music-harry-red-missouri
File name:456098#.zip
Download: download sample
Signature GuLoader
File size:67'352 bytes
First seen:2020-05-18 06:28:17 UTC
Last seen:2020-05-18 14:09:12 UTC
File type: zip
MIME type:application/zip
ssdeep 1536:CdcvyQSReOnBldpkvL3U/AhIVl5Ejcfjp4XjjTLv:OcLifu3CAOrffjp4X/v
TLSH F9630228EDED89BA75B953503540DDE76E1D1C1CFE6588C51CCDEA852A18A32E0E4F0B
Reporter jarumlus
Tags:GuLoader

Intelligence


File Origin
# of uploads :
3
# of downloads :
82
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Injector
Status:
Malicious
First seen:
2020-05-18 06:35:53 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
26 of 48 (54.17%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

zip bfb21a94283a7176a0c97198b3e3bd371c064b941da2ca0804d1d2abc1a9eca6

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments