MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a08375f156e87c9013b349e07ce116c1bbcd4621b7956a285382623e6a65c430. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


ModiLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a08375f156e87c9013b349e07ce116c1bbcd4621b7956a285382623e6a65c430
SHA3-384 hash: a3d629696f13314e977ba882f8700b5d7d3138382698e2a1b6218871067d2437220e9000f0a4509d3c433c217e4b5fb8
SHA1 hash: e475cd100e1ddccc8dd1322c52734c9e72ae306b
MD5 hash: bcc2a2c2dc684deb450b37a3c1b5d074
humanhash: william-fifteen-kilo-lamp
File name:PO 354688976.iso
Download: download sample
Signature ModiLoader
Create hunting rule
File size:1'042'432 bytes
First seen:2020-10-07 10:58:04 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 12288:wKbIaBg0N87tcWa4WGEb7OVPso/BZm5gCiOsHMNTrlbJEBvJco+Ltj:wIG97KZGOsKOMhlbJr
TLSH 84257D22A1D14C33C5F31A789D1BD358992EBD213D3AA9452BF62D0C7F35261793E2A3
Reporter abuse_ch
Tags:iso ModiLoader


Avatar
abuse_ch
Malspam distributing ModiLoader:

From: Karayel Cebrail <info@medikon.net>
Subject: RE: Standard New Order #PO 354688976
Attachment: PO 354688976.iso (contains "PO 354688976.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
98
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a08375f156e87c9013b349e07ce116c1bbcd4621b7956a285382623e6a65c430/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-10-07 10:59:06 UTC
AV detection:
11 of 48 (22.92%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ucbxl4kw5b6jae5tjhqhzyiwyg542rrbw6kwukctqjrd42tfyqya._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/a08375f156e87c9013b349e07ce116c1bbcd4621b7956a285382623e6a65c430

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

ModiLoader

iso a08375f156e87c9013b349e07ce116c1bbcd4621b7956a285382623e6a65c430

(this sample)

ModiLoader

Executable exe 00a59bd4f68fa1f661435296736f595c1e20968ce22c21afc2f56099cbb2a600

  
Dropping
MD5 2d8cf019312360c484498a1b1d35b746
  
Dropping
ModiLoader
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 00a59bd4f68fa1f661435296736f595c1e20968ce22c21afc2f56099cbb2a600

Comments