MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dcd3a5bba0b71c09a304b72aa99434c6b15595f339c3e848976153efdb4302b6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: dcd3a5bba0b71c09a304b72aa99434c6b15595f339c3e848976153efdb4302b6
SHA3-384 hash: 9dc402d2926851bb0c224e74352e16b58d539399cbde1ddafbb0ffb7aff52f5cebead422f8e2fc7bcf5264193c69fd94
SHA1 hash: 9d5c8062aa527bb6a833cf98ed2ed839cfc3cc45
MD5 hash: 18c7aa1ef031e2ee1afe32e2e91a69ff
humanhash: beer-william-table-iowa
File name:TNT Original Invoice.ace
Download: download sample
Signature GuLoader
Create hunting rule
File size:43'548 bytes
First seen:2020-06-05 04:37:51 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 768:5+S7RExucyhVpxiTbuy5TCsdOXAoPHDXAHGHf07ObTnaHEcYH4goSZPJxnUhX94:5+SuSpcTaUTvdOXAoXHf+Ob2iYsBxwX+
TLSH D913026B34DE24EBAF58374C097E849B1428ECD1276B235808AF97D13CEC8162E127A1
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25165.AceHeur.Scr.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-scr.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-05 05:36:47 UTC
AV detection:
12 of 48 (25.00%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

ace dcd3a5bba0b71c09a304b72aa99434c6b15595f339c3e848976153efdb4302b6

(this sample)

GuLoader

Executable exe 654512ba13cb405d6b839c46b229c1a6d506fbe3749861d8973f484edf9ef791

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 654512ba13cb405d6b839c46b229c1a6d506fbe3749861d8973f484edf9ef791
  
Dropping
MD5 377542e6fd9f386e88fac8ff52e1317e

Comments