MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e53b75475d1fba390648e8d2c7dec986a775a5355f464f823ec2dd9fd91de42d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e53b75475d1fba390648e8d2c7dec986a775a5355f464f823ec2dd9fd91de42d
SHA3-384 hash: b43b5ddfde8030c2b10348ecaf0ddc07dd68e8f7ba75e3a1ab949cb536c554e3cac16c7cfdd9264cc639cbe75eefad0f
SHA1 hash: 5baf54a7a53a4706b9bd11591b6b1465395bba76
MD5 hash: 1b7a51b3dad66b9cf1e44a7861ba0e86
humanhash: crazy-carpet-music-princess
File name:PAYMENT COPY.ace
Download: download sample
Signature GuLoader
Create hunting rule
File size:74'329 bytes
First seen:2020-06-04 04:27:32 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 1536:66eS2Fj1Uv6+XZoR8UdUoTUabUrkqEArcUt3msxzq/GHlDH7BOPx2:pz2Fj1UvEhqab/qtnVmczq/4HsA
TLSH 1573121C9D04C475AB11B074F62B3CCA676D4FB0D8AD6E2F5418F9CF9E9A93087A02C5
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
57
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25165.AceHeur.Scr.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-scr.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-04 00:33:22 UTC
AV detection:
24 of 48 (50.00%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

ace e53b75475d1fba390648e8d2c7dec986a775a5355f464f823ec2dd9fd91de42d

(this sample)

GuLoader

Executable exe 65ec71a21b121cb6b5ad5c16425f217589eac46a8879aad3a8f04f5e5b2d872e

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 65ec71a21b121cb6b5ad5c16425f217589eac46a8879aad3a8f04f5e5b2d872e
  
Dropping
MD5 c909511407214383e2774feb86235a16

Comments