MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d76097807b26d4515e0ee19c3b75e2a609f4288a41d7f7081adf4f572dc155c6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d76097807b26d4515e0ee19c3b75e2a609f4288a41d7f7081adf4f572dc155c6
SHA3-384 hash: 4101ad60a8da1231ab48a848b1be1def497c8f3c894f68224fcfd083dbe20a331d536d383c5584991b72dd7ae0269880
SHA1 hash: d9655ed535a54f2ba6007c4b5112ab8358e700c7
MD5 hash: 07e1b8d8a24bcb57a252e48f318ab064
humanhash: leopard-coffee-early-ohio
File name:Swift Copy.ace
Download: download sample
Signature GuLoader
Create hunting rule
File size:20'590 bytes
First seen:2020-05-29 06:09:48 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 384:qU8estZwWeMahD8tq9tOPyl9I08hGkvF0bO7nxECETkdiA24D8uyXjL:38eewtf/OP02hGkN0bOxEC/iA3CL
TLSH AE92E1CEF6FE715579A27C7BA51EFC6C2C91D1023167A856BFA27110878E12D1730342
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25165.AceHeur.Scr.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-scr.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Vbkrypt
Create hunting rule
Status:
Malicious
First seen:
2020-05-29 07:25:38 UTC
File Type:
Binary (Archive)
Extracted files:
3
AV detection:
14 of 31 (45.16%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

ace d76097807b26d4515e0ee19c3b75e2a609f4288a41d7f7081adf4f572dc155c6

(this sample)

GuLoader

Executable exe 2c80924676beb57ffb753a576380eed1ec48e265a7843a52b08664463d890b61

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2c80924676beb57ffb753a576380eed1ec48e265a7843a52b08664463d890b61
  
Dropping
MD5 b68e2a73ad3a859a3fc35b538d88d82f

Comments