MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1a454c2ce5ae4e1d28fcae44870c02a8ad57d477089596563236dd4eb888776d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1a454c2ce5ae4e1d28fcae44870c02a8ad57d477089596563236dd4eb888776d
SHA3-384 hash: 85e3d605f1a9a6abbab6a6445d27a0e27bcffd671879f849a7a126eae567eab47d1910e7f41837d07015788e37ff799c
SHA1 hash: e00cba8b4ee1496b111f38bc63b1c252adf65138
MD5 hash: c1eb22a002cbefcf5e3cf296c62329a5
humanhash: coffee-carbon-alpha-rugby
File name:AIR WAYBIL SHIPPING DOCUMENT-pdf.7z
Download: download sample
Signature MassLogger
Create hunting rule
File size:569'340 bytes
First seen:2020-08-10 12:49:31 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:LBzGO/m/xWAcNKBkvL6XtNoqyVVPgAIn1aSyDU:0ZkAcg0L6bM/m1LyDU
TLSH 8EC4230120F8E984F6F858A0037F88236DF1653E856E96A344E5F6A53C05AD3AD7D3BD
Reporter abuse_ch
Tags:7z MassLogger


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: lin.nbt.net.tr
Sending IP: 77.223.153.10
From: Reservas Abra Pas <abrapasreservas@cantur.com>
Reply-To: Reservas Abra Pas <baeutyslondon@yahoo.com>
Subject: Re: **TOP URGENT** AWB & Shipping Doc BL
Attachment: AIR WAYBIL SHIPPING DOCUMENT-pdf.7z (contains "AIR WAYBIL & SHIPPING DOCUMENT-pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25906.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1a454c2ce5ae4e1d28fcae44870c02a8ad57d477089596563236dd4eb888776d/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-08-10 12:51:07 UTC
AV detection:
11 of 48 (22.92%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=djcuylhfvzhb2kh4vzciodacvcwvpvdxbckzmvrsg3ou5oeio5wq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/1a454c2ce5ae4e1d28fcae44870c02a8ad57d477089596563236dd4eb888776d

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 1a454c2ce5ae4e1d28fcae44870c02a8ad57d477089596563236dd4eb888776d

(this sample)

MassLogger

Executable exe 7080b4b381aa5445667f682c0b6d8a7651dfbf8c07383f9796ffd8558e506338

  
Dropping
MD5 9f30b594d3530816e972b02b5c67dcb6
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 7080b4b381aa5445667f682c0b6d8a7651dfbf8c07383f9796ffd8558e506338

Comments