MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e77f27cba91b5f2d3debf179b6044278bfe9c5e313ce2edf307eff35d65318ff. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e77f27cba91b5f2d3debf179b6044278bfe9c5e313ce2edf307eff35d65318ff
SHA3-384 hash: 294eb525a100b3cfae89a90da99608232b1e476c817d0bdeefcf9c021c606391b7c828431b8b5946e56fed09b1cc5495
SHA1 hash: e827d31644367b43cf0757c241b686394d1cd95c
MD5 hash: f2be0ce4ed197a6f9da3ced65454de32
humanhash: purple-summer-helium-undress
File name:7104630_Payment_Confirmation.iso
Download: download sample
Signature GuLoader
Create hunting rule
File size:266'240 bytes
First seen:2020-05-05 17:33:46 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 3072:PAi0wWcseM4lOXqvV5DWQVlgBM1HSPH1Ya990:BMEvDOOFw1Yi
TLSH 284449837960ED20E164B535D718FAEED7267C3296B1554B318C7B2AAF331168D3231E
Reporter cocaman
Tags:GuLoader iso


Avatar
cocaman
Malicious email
From: "Irene Rosario"<wwpratt@charter.net>
Received: from impout003.msg.chrl.nc.charter.net (impout003aa.msg.chrl.nc.charter.net [47.43.20.27])
Date: Tue, 5 May 2020 10:00:25 -0700
Subject: Payment Confirmation..
Attachment: 7104630_Payment_Confirmation.iso

Intelligence

File Origin
# of uploads :
1
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Win32.Injector.EJXZ.23312.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Nanobot
Create hunting rule
Status:
Malicious
First seen:
2020-05-05 17:35:35 UTC
File Type:
Binary (Archive)
Extracted files:
10
AV detection:
18 of 31 (58.06%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=457sps5jdnps2ppl6f43mbccpc76trpdcphc5xzqp37tlvstdd7q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

iso e77f27cba91b5f2d3debf179b6044278bfe9c5e313ce2edf307eff35d65318ff

(this sample)

GuLoader

Executable exe b920d1987e381d9b0944672e76d927fc6e1dc90173990aa1143a1029da87d9f5

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b920d1987e381d9b0944672e76d927fc6e1dc90173990aa1143a1029da87d9f5

Comments