MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f17eed1cdb75083ec3122405a723ea6c21dfde72b25cd90142b59a8f21f93ec5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f17eed1cdb75083ec3122405a723ea6c21dfde72b25cd90142b59a8f21f93ec5
SHA3-384 hash: 604a5c01e65a9a87f723a3d884556ec4e5506137dc69fe00b540a6054bb8b44e0439f9731368a0e2d1f40260ae98db96
SHA1 hash: add2f54bcd111aa2ea4e510b1b499798ab7a017c
MD5 hash: 89b2f0cd23790b0aeb60666bc76cf688
humanhash: undress-west-indigo-september
File name:PO-K-128 IAN 340854.rar
Download: download sample
Signature GuLoader
Create hunting rule
File size:37'533 bytes
First seen:2020-06-01 13:37:54 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 768:CsqKqk900QsYvbC2osqXvDWdQaACevOarhmUKqZYYd4xlYBQDBboi:N5Nov+2obXvDmQaAvGaduqZYI+p9bt
TLSH 93F2F1D1FE9E60790196EEBDB68B838B1A000CBD26182CB2E413ABB0671D35744D794E
Reporter abuse_ch
Tags:GuLoader rar


Avatar
abuse_ch
Malspam distributing GuLoader:

From: Sales <rmontero@eldorado.com.uy>
Subject: Re:PO-K-128 IAN 340854
Attachment: PO-K-128 IAN 340854.rar (contains "PO-K-128 IAN 340854.bat")

GuLoader payload URL:
https://drive.google.com/uc?export=download&id=1G4oijZx2VKT3ZmPoyIcg-8dpdAUKbYFL

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Npe
Create hunting rule
Status:
Malicious
First seen:
2020-06-01 14:36:15 UTC
AV detection:
19 of 48 (39.58%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

rar f17eed1cdb75083ec3122405a723ea6c21dfde72b25cd90142b59a8f21f93ec5

(this sample)

GuLoader

Executable exe cb108b44f7c1ce27111e05df5b00d405abd180fc46d280b78e9a137fd9858dbe

  
Dropping
MD5 e58166bd8454338b43704f5f76f48e87
  
Dropping
GuLoader
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 cb108b44f7c1ce27111e05df5b00d405abd180fc46d280b78e9a137fd9858dbe

Comments