MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 de351e893057bf956bb478f1c21c90185bef430391b464f104b237b74e17dc1c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: de351e893057bf956bb478f1c21c90185bef430391b464f104b237b74e17dc1c
SHA3-384 hash: d9919f432ab3e1a3bf22807abaf49b07602558cb68e3ef7e96fa6e0e97e159bdc24e227fb8f03033f4b00cdbeded5c89
SHA1 hash: 0310049e01a688df2a52b8df8070d5b64f4f0058
MD5 hash: ee46e45b569110c577be0996dbe8f031
humanhash: delaware-ack-fillet-pip
File name:Shipping Doc_PDF.ace
Download: download sample
Signature GuLoader
Create hunting rule
File size:53'316 bytes
First seen:2020-05-28 08:08:56 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 1536://ugTXBsFqq5z1mU4A70+viMQhndO7TtNZHGinTkf:nugFmzQdQ6/Y7X9GinIf
TLSH 3C33018E3756792B1515009D57EF14CD4F6CB6A801FC77E37C2B898C984CE5ECE92489
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25165.AceHeur.Scr.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-scr.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-05-28 08:35:51 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
12 of 48 (25.00%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

ace de351e893057bf956bb478f1c21c90185bef430391b464f104b237b74e17dc1c

(this sample)

GuLoader

Executable exe 2df7880f7255e5944ae288c0bf24817085bb1a8291257d061f09919746095286

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2df7880f7255e5944ae288c0bf24817085bb1a8291257d061f09919746095286
  
Dropping
MD5 978586902a99c11978667d2de997c1b9

Comments