MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9079676ab3cd11870e9298201634f499a958986f2ecba366c9baeb6cbfe71b84. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


ModiLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9079676ab3cd11870e9298201634f499a958986f2ecba366c9baeb6cbfe71b84
SHA3-384 hash: 3b41656144e7fe0e41eef54eefb70e3a623edd893d0a8dc9086ef2ff8662e2cacd3297ee290fd99e9467dd0e02654a28
SHA1 hash: 74a1006335a9a0327d2c185206ee4bc78d79ebab
MD5 hash: f6f5a1d893ca1b5c574e410a574ac4b7
humanhash: aspen-johnny-chicken-diet
File name:Amacon Company profile and about us.rar
Download: download sample
Signature ModiLoader
Create hunting rule
File size:421'788 bytes
First seen:2020-10-22 07:04:52 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:FedRZgLlxgqhTb1oyUlwOTkNBgIEdYnZUzcRq6DY1jME+zQ989DOlZi5bJIqcjuN:FAMgCn1bUuAYtoEYdtoQqN56pCx
TLSH 339423079B26FD16835E9DC0E2FA26C94935448D3D66E817F828EE918631F3C9DD8F12
Reporter abuse_ch
Tags:ModiLoader rar


Avatar
abuse_ch
Malspam distributing ModiLoader:

HELO: rdns0.pollyarm.xyz
Sending IP: 157.230.63.67
From: Amacon Makgoka<amacon.makgoka@hotmail.com>
Subject: Re: 回复: Request for Quotation with reference: BINIF0865
Attachment: Amacon Company profile and about us.rar (contains "Amacon Company profile and about us.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9079676ab3cd11870e9298201634f499a958986f2ecba366c9baeb6cbfe71b84/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-10-22 06:30:41 UTC
AV detection:
6 of 48 (12.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=sb4wo2vtzuiyodustaqbmnhutguvrgdpf3f2gzwjxlvwzp7hdoca._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

ModiLoader

rar 9079676ab3cd11870e9298201634f499a958986f2ecba366c9baeb6cbfe71b84

(this sample)

ModiLoader

Executable exe b6138e4d197c59380c87723cb54c9cf7d5e4600a4273c98723470a57a591edda

  
Dropping
MD5 006458df198f7aeaab76de3875ed67dc
  
Dropping
ModiLoader
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b6138e4d197c59380c87723cb54c9cf7d5e4600a4273c98723470a57a591edda

Comments