MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ed11554aeabe93b128e38273bf2e8ac787bb43cf92c0cd5a1e006b07355f110b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ed11554aeabe93b128e38273bf2e8ac787bb43cf92c0cd5a1e006b07355f110b
SHA3-384 hash: 0738fdd47ebca891f3ef88d3da9abb67c50233e98e807cd7abb691fb756a38dc5ad102a05c0e450056b6ebfe06f78458
SHA1 hash: 624ac8cbe7c921d7622e3d6f8b3e6206935cfb68
MD5 hash: 10b1c47c14b0f1c60b2af35d139d8986
humanhash: muppet-undress-lake-alanine
File name:PO 05272020.ace
Download: download sample
Signature GuLoader
Create hunting rule
File size:20'503 bytes
First seen:2020-05-29 06:22:32 UTC
Last seen:2020-05-29 11:11:04 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 384:XJGlauABZ8NejKtnqVXTvpBKq0Pwp2CSlVyaF8MZuW6pxVolY1kag:Al+UTn0X77Ka3Seajl63Volkkv
TLSH 1392CF464C9A0CF4D150EAF17212C9D9649814F37CEBA6E2E40F1209FEC65A29B27DDD
Reporter jarumlus

Intelligence

File Origin
# of uploads :
3
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25738.AceHeur.Exe.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Vbkrypt
Create hunting rule
Status:
Malicious
First seen:
2020-05-29 06:36:49 UTC
File Type:
Binary (Archive)
Extracted files:
3
AV detection:
15 of 31 (48.39%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

ace ed11554aeabe93b128e38273bf2e8ac787bb43cf92c0cd5a1e006b07355f110b

(this sample)

GuLoader

Executable exe 337471a86433031e87027a6459fee04e490ddfc016d4d7eab062e0a1e09ca138

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 337471a86433031e87027a6459fee04e490ddfc016d4d7eab062e0a1e09ca138
  
Dropping
MD5 845b8e8b7d49cec7cb570f363780bb7f

Comments