MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4c458adc275a7faedf5c6d94f20c71de8bd853b5bd3cee24311f35c2dd6d6195. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Smoke Loader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4c458adc275a7faedf5c6d94f20c71de8bd853b5bd3cee24311f35c2dd6d6195
SHA3-384 hash: a670983de19c9e58bb942a354cf832181deeb14a287e3e6b66aca2a5a8e6d32e23ba1df2eb9e5efa345eca2074f192bc
SHA1 hash: 60c688ccf35ed7b23095fcaa5a5b93ad1fe2fcae
MD5 hash: 9120241a4a203e4ebbd7251470580b8a
humanhash: whiskey-comet-zebra-nitrogen
File name:Payment Copy.iso
Download: download sample
Signature Smoke Loader
Create hunting rule
File size:227'328 bytes
First seen:2020-12-01 11:47:58 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 3072:NETWdyUWZ4d2i8L8tSltHBtCmLcpelfWdSP8V9eT:UWoU9d2XLM+tHPCocpy+s5
TLSH 75249D2176D1C033E25719B548A5D2B55A2BFCB25B3496CB3BCC2B698F372E18A35343
Reporter fabjer
Tags:iso

Intelligence

File Origin
# of uploads :
1
# of downloads :
138
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.DownLoader36.20894.24849.16294.UNOFFICIAL
Create hunting rule

Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/4c458adc275a7faedf5c6d94f20c71de8bd853b5bd3cee24311f35c2dd6d6195/
Threat name:
Win32.Trojan.MintDreidel
Create hunting rule
Status:
Malicious
First seen:
2020-12-01 03:21:52 UTC
AV detection:
17 of 29 (58.62%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/4c458adc275a7faedf5c6d94f20c71de8bd853b5bd3cee24311f35c2dd6d6195

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Smoke Loader

iso 4c458adc275a7faedf5c6d94f20c71de8bd853b5bd3cee24311f35c2dd6d6195

(this sample)

Smoke Loader

Executable exe ba1b8c4a78257830c7fa8528e9788af055d62d3605de94e7c433260ebdd9a286

  
Dropping
SHA256 ba1b8c4a78257830c7fa8528e9788af055d62d3605de94e7c433260ebdd9a286
  
Delivery method
Distributed via e-mail attachment

Comments