MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 762f9f44f64063a11991b11765f6e02488835f0eca69ce2b967e35ba22edbfd7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


ModiLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 762f9f44f64063a11991b11765f6e02488835f0eca69ce2b967e35ba22edbfd7
SHA3-384 hash: 66acda1ca8366a75f365447317739ce727d41e47181915051aed9150ce7f7ccc235d50b3df353896f13f2a3ab6860345
SHA1 hash: 509c09955174db7d5b2f6aac8d141deddf3eadc8
MD5 hash: b6a50ff5774b43f49dccd260647e9c55
humanhash: winner-lima-burger-saturn
File name:Türkiye Teklif - PO FH8765446878-15-10-2020.zip
Download: download sample
Signature ModiLoader
Create hunting rule
File size:487'873 bytes
First seen:2020-10-15 12:59:54 UTC
Last seen:Never
File type: zip
MIME type:application/x-rar
ssdeep 12288:XV0f3SNDiYaGJx7SfQkHGwqeePb3WzwVyCHV53Oow:2f/lW7hCSPjWsV3V53Oow
TLSH 97A4235508BDD942D74351F0917B2BC6AB3FF7F3AED2EC7FD28A0990296E89510A3601
Reporter abuse_ch
Tags:geo ModiLoader TUR zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

From: Konstantinidis Michalis <info1@atl-loizou.com>
Subject: Re: Türkiye Teklif - PO FH8765446878-15-10-2020
Attachment: Türkiye Teklif - PO FH8765446878-15-10-2020.zip (contains "Türkiye Teklif - PO FH8765446878-15-10-2020.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
74
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/762f9f44f64063a11991b11765f6e02488835f0eca69ce2b967e35ba22edbfd7/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=oyxz6rhwibr2cgmrwelwl5xaeseigxyozju44k4wpy23uixnx7lq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/762f9f44f64063a11991b11765f6e02488835f0eca69ce2b967e35ba22edbfd7

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

ModiLoader

zip 762f9f44f64063a11991b11765f6e02488835f0eca69ce2b967e35ba22edbfd7

(this sample)

ModiLoader

Executable exe 72427a1ab5dbf3e5c6d4f297ec33becb68bc39d1c8446f98c47d1560f6371a3a

  
Dropping
MD5 98bba0641ef9aed11939a3817370822c
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 72427a1ab5dbf3e5c6d4f297ec33becb68bc39d1c8446f98c47d1560f6371a3a

Comments