MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fd552f79610365ba2654d1e88414f2a5a3efdbd5b1c35fd8e988e94887fbd367. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


GuLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fd552f79610365ba2654d1e88414f2a5a3efdbd5b1c35fd8e988e94887fbd367
SHA3-384 hash: 3e66d4d7c14dc8254d83bde2cbe9f249c4d7c239bec6774d90c2c655e262a2f5fae9de484979ee63325cef340e3419d6
SHA1 hash: eaef235dc3c428989558adcecaa392b93d953204
MD5 hash: 58836d92b67967187253a59bf3219f28
humanhash: fifteen-mirror-quiet-arizona
File name:Quotation Sheet and PO-including FOB, MOQ,klf.img
Download: download sample
Signature GuLoader
Create hunting rule
File size:1'245'184 bytes
First seen:2020-05-25 05:30:45 UTC
Last seen:2020-05-28 19:46:17 UTC
File type: img
MIME type:application/x-iso9660-image
ssdeep 1536:nm2K4QiGvM9IEkj2xoWMjph6K/F32msgA:nmL4QBvKIt5nj/6KNa
TLSH 7B45E51375D8BC42EA204EB28DD25AA25D62BD259CE18B17764FBB0D1F7B2901FB0306
Reporter cocaman
Tags:GuLoader img


Avatar
cocaman
Malicious email
From: Christina Jose <admin01@4ourhome.co.uk>
Received: from box.4ourhome.co.uk (box.4ourhome.co.uk [104.168.136.135])
Date: Mon, 25 May 2020 02:26:15 +0100
Subject: Re: Quotation sheet and Purchase Order (#KBHI-6405110)
Attachment: Quotation Sheet and PO-including FOB, MOQ,klf.img

Intelligence

File Origin
# of uploads :
2
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.DownLoader33.45988.21399.25939.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Geniso
Create hunting rule
Status:
Malicious
First seen:
2020-05-25 01:02:27 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
12 of 30 (40.00%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

GuLoader

img fd552f79610365ba2654d1e88414f2a5a3efdbd5b1c35fd8e988e94887fbd367

(this sample)

GuLoader

Executable exe a32c37dd601a6fcdd6e622b2c928c7ef7935a77a0df9a2dfb9c7774630dd266e

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a32c37dd601a6fcdd6e622b2c928c7ef7935a77a0df9a2dfb9c7774630dd266e

Comments