MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 99ebd29c10ab0e9063fbec9966f1be56986d6c74630fb251baab26988aec93cd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 5
| SHA256 hash: | 99ebd29c10ab0e9063fbec9966f1be56986d6c74630fb251baab26988aec93cd |
|---|---|
| SHA3-384 hash: | 38d5fc08eff1a2e837f24930914fa2c356680ff32fb1d065f25a948149e962ad5ed0d2b96e483bca17afa71849843b26 |
| SHA1 hash: | a10a2e29d954c964d0525a09312322d67b1680fc |
| MD5 hash: | f36429167b08b61f8693f4427c60ce14 |
| humanhash: | bluebird-montana-illinois-nebraska |
| File name: | SecuriteInfo.com.Trojan.DownLoader33.52581.8734.6162 |
| Download: | download sample |
| File size: | 1'254'914 bytes |
| First seen: | 2020-06-11 08:21:16 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | 70411d486e9bd9bdaaf2d4939bbd54bc (1 x NetWire, 1 x FormBook) |
| ssdeep | 24576:6aXcbtJOhBn2j4byGtIW3nEjlgooooooooooooooooP:6aXqO2sbyxxgooooooooooooooooP |
| Threatray | 75 similar samples on MalwareBazaar |
| TLSH | 50456C22B7914C33C1331A3DDC5B9679E82ABE511A24A8C62BF83D789F75341392D1B7 |
| Reporter |  SecuriteInfoCom |
Intelligence
File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection:
Remcos
Gathering data
Threat name:
Win32.Trojan.Remcos
Status:
Malicious
First seen:
2020-06-11 06:31:05 UTC
AV detection:
27 of 31 (87.10%)
Threat level:
5/5
Verdict:
malicious
Similar samples:
+ 65 additional samples on MalwareBazaar
Result
Malware family:
modiloader
Score:
10/10
Tags:
family:modiloader trojan
Behaviour
Suspicious use of WriteProcessMemory
ModiLoader First Stage
ModiLoader, DBatLoader
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe 99ebd29c10ab0e9063fbec9966f1be56986d6c74630fb251baab26988aec93cd
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.