MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 eeac7c4fa7f60abcdf3f011ed548a16c48dd49d7e6d2532bc48e4b466844fe50. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: eeac7c4fa7f60abcdf3f011ed548a16c48dd49d7e6d2532bc48e4b466844fe50
SHA3-384 hash: 11b5fc20fa2c7229689670069a484b1174c34158b16699059fe3b8b97aad0a8bbb50b51e2973069d2af525507967473a
SHA1 hash: 14d5d1c331a6db964b69dbeb59e77c0dae567e83
MD5 hash: 9c4ee5afe08f95bff6a8296014e6ff54
humanhash: music-pip-five-sierra
File name:souq_customer_information_covid-19_April2020.img
Download: download sample
Signature GuLoader
Create hunting rule
File size:1'245'184 bytes
First seen:2020-04-07 18:55:28 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 768:NyunzYmz7jrTqSaCKy5hpR5BYhIQ/EpkNzKQGaQ+AW5one39N/yJDOsQka0S6R2Q:NdEn0mzKaTzOiN/Ija0S6IVW
TLSH A645E722BA50FDC1F4144EB14A7A9FA842E5BC346D412A0379DC3B3E3F359457EA2B16
Reporter abuse_ch
Tags:COVID-19 img

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Win.Packed.Generic-7652321-0
Create hunting rule

Win.Trojan.VBGeneric-7652344-0
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Agensla
Create hunting rule
Status:
Malicious
First seen:
2020-04-07 19:38:01 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
19 of 47 (40.43%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=52whyt5h6yflzxz7aepnksfbnren2sox43jfgk6erzfum2ce7zia._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

img eeac7c4fa7f60abcdf3f011ed548a16c48dd49d7e6d2532bc48e4b466844fe50

(this sample)

GuLoader

Executable exe 0dda0b606410793cddaee636a8ca1e1597b000c3c19ef24cd217097944998d4e

  
Dropping
MD5 bb579de42bb35dd2a2534197d28bf7f0
  
Dropping
SHA256 0dda0b606410793cddaee636a8ca1e1597b000c3c19ef24cd217097944998d4e
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 0dda0b606410793cddaee636a8ca1e1597b000c3c19ef24cd217097944998d4e

Comments