MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 edc36bfef2c4b6b3121b2bc03c24bcf462a08a2b776e17bd00130a78e9d97748. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


ModiLoader


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: edc36bfef2c4b6b3121b2bc03c24bcf462a08a2b776e17bd00130a78e9d97748
SHA3-384 hash: c89ba271c2aff7ef74494a0439df99d41ac161b2a4787eda9b26ac89eda341d4716befc691c9da87c16a250df14f4751
SHA1 hash: a83a50e4e2d72d1001bc84f36fab9fe8799c4c7d
MD5 hash: 4781c65762016dbb1e624418e6ac2d1b
humanhash: mexico-potato-spaghetti-jupiter
File name:Report for COVID-19 Non-Complaince Doc.img
Download: download sample
Signature ModiLoader
Create hunting rule
File size:1'441'792 bytes
First seen:2020-10-09 17:24:02 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:6uDiCtaeLlIPFPqqDgNYN5u/g7GWDftVHa0F8Gq8wjVQsX3erB9p:9GCblI9PqqDCYN5BaWT7dwJQ
TLSH 64657D32E2915437C1272A749D1B9765AB39FF102E28AC467BF41D5C5FF97803C2A2A3
Reporter abuse_ch
Tags:COVID-19 covid19 geo img ModiLoader ZAF


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: rdns4.carepayy.xyz
Sending IP: 151.80.255.188
From: covid19notify@health.gov.za
Subject: Action Required: Customer Report for COVID-19 Non-Compliance
Attachment: Report for COVID-19 Non-Complaince Doc.img (contains "Customer Report on COVID-19 Non-Complaince. Doc.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
151
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/edc36bfef2c4b6b3121b2bc03c24bcf462a08a2b776e17bd00130a78e9d97748/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=5xbwx7xsys3lgeq3fpadyjf46rrkbcrlo5xbppiacmfhr2ozo5ea._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Remcos
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/edc36bfef2c4b6b3121b2bc03c24bcf462a08a2b776e17bd00130a78e9d97748

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

ModiLoader

img edc36bfef2c4b6b3121b2bc03c24bcf462a08a2b776e17bd00130a78e9d97748

(this sample)

ModiLoader

Executable exe 5b1f1843bbb992e3d5c635aa69d8409de4ae4d3f04cf19994d8e953e99cf451a

  
Dropping
MD5 949409e8ecfaf8ae46bd325c7b5b9f8d
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 5b1f1843bbb992e3d5c635aa69d8409de4ae4d3f04cf19994d8e953e99cf451a

Comments