MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c55b403bdd131a5c019ba86569b55aff210396f7ea9bef4496e183524fbda4b6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



ModiLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: c55b403bdd131a5c019ba86569b55aff210396f7ea9bef4496e183524fbda4b6
SHA3-384 hash: e7128fba7de479fc9a4f41d24c7804d4f77676d6bb6bc168ef1e73b82bf1e3e74899d9d3cffdafd99b54fcd111c4e107
SHA1 hash: 3f3dc49706cd1bc8664e55ad7806b1503fde4805
MD5 hash: 811a872cfb0d0214df4d6b79043a4c66
humanhash: july-cup-network-fish
File name:file.zip
Download: download sample
Signature ModiLoader
File size:1'195'952 bytes
First seen:2020-08-17 19:05:14 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:OA5FyAJIQ/oYDuunidEKTxBpxIz83PVHEh+Pk3Y3cbpxAqsw22hEh2c:VdIQ/oA9nieM2z8u+Pt3cbpOpomh2c
TLSH C74523464DF11E4C9A8DCA7AD7BB423CE4F2C0D6DC87CC39D99C136A062B01B9BD6466
Reporter abuse_ch
Tags:ModiLoader zip


Avatar
abuse_ch
Malspam distributing ModiLoader:

From: info@ntavas.gr
Subject: Re: proforma
Attachment: file.zip (contains "file.exe")

Intelligence


File Origin
# of uploads :
1
# of downloads :
56
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.DelfInject
Status:
Malicious
First seen:
2020-08-17 17:44:20 UTC
AV detection:
19 of 29 (65.52%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

ModiLoader

zip c55b403bdd131a5c019ba86569b55aff210396f7ea9bef4496e183524fbda4b6

(this sample)

  
Dropping
ModiLoader
  
Delivery method
Distributed via e-mail attachment

Comments