MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 715193618b2deece70a61687d0cfa602ab5bfd34b7d3164e8c87fdb3468ef925. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


ModiLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 715193618b2deece70a61687d0cfa602ab5bfd34b7d3164e8c87fdb3468ef925
SHA3-384 hash: ef8e0c23289bd5e1346ff85c70336dac778224b1879548c5b29e1c8eea62130270ddfd75c97cf794bc821db4fc0c9684
SHA1 hash: 08e755e46d48b98c6eb2d8798c51a071cefbd6c5
MD5 hash: 12baa29305fc96a64add43334de77890
humanhash: glucose-yankee-angel-fruit
File name:Seafood 78904576.rar
Download: download sample
Signature ModiLoader
Create hunting rule
File size:251'099 bytes
First seen:2020-08-14 12:20:00 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:z4GmtwY0FuE+EB+rjdqsvfHSmxc21PAJvHn2FWYDtLZn:zjmtwPkmB+r5BvNc2yNWFvJl
TLSH 4334232A002C2B09803324631FB9C5CBA277A9F82D591F97366B6567444DFC7B0BDA67
Reporter abuse_ch
Tags:ModiLoader rar


Avatar
abuse_ch
Malspam distributing ModiLoader:

HELO: pro25.emailserver.vn
Sending IP: 103.15.48.245
From: Godaco USA <deputy@domidoor.com>
Subject: NEW ORDER SEAFOOD
Attachment: Seafood 78904576.rar (contains "78904576.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/715193618b2deece70a61687d0cfa602ab5bfd34b7d3164e8c87fdb3468ef925/
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ofizgymlfxxm44fgc2d5bt5gakvvx7juw7jrmtumq763gruo7esq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/715193618b2deece70a61687d0cfa602ab5bfd34b7d3164e8c87fdb3468ef925

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

ModiLoader

rar 715193618b2deece70a61687d0cfa602ab5bfd34b7d3164e8c87fdb3468ef925

(this sample)

ModiLoader

Executable exe b58c0db88d6026043bc0db1b5072cd2be7b0ceabf750a9d7275794d69fc04fe1

  
Dropping
MD5 fd2e021aea8d343db9144a74e64e8599
  
Dropping
ModiLoader
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b58c0db88d6026043bc0db1b5072cd2be7b0ceabf750a9d7275794d69fc04fe1

Comments