MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2cbdf889250b6ce9384d8631779086055b2486b1a5956e9645650c3a57133356. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2cbdf889250b6ce9384d8631779086055b2486b1a5956e9645650c3a57133356
SHA3-384 hash: 34fc5e8dfbccedaa449fb3c7cbb10cf113a533468c8c63a0085cb182875f451e57c1318866b2a0d7b827cfd932701c84
SHA1 hash: c7b04b3400ccc8c56f83fb7266b3b151b2a56034
MD5 hash: aa119f2b08580042c929c42eafa9c578
humanhash: football-oranges-magnesium-earth
File name:Material requirements.7z
Download: download sample
Signature MassLogger
Create hunting rule
File size:462'128 bytes
First seen:2020-07-17 16:34:00 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 6144:fMn6jg7D9/fWnUYLp4lXehHQOjTyzSfTbQ+gQQdyTrr5ADvua/D96u1VRT07+OWm:fPjgXpfUx2eQOjuHzMr5ADRD96iDPEv
TLSH 35A42330A453A43356C09F70CA889223C1771DAF78BF0FA6489D62D650DEE5365EE26F
Reporter abuse_ch
Tags:7z MassLogger


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: server.espressocafe.ro
Sending IP: 176.223.122.143
From: Director comercial <Sales@klaren.mx>
Subject: Solicitud de presupuesto
Attachment: Material requirements.7z (contains "MY_self_cryped.exe")

MassLogger FTP exfil server:
ftp.artego.ro:21

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2cbdf889250b6ce9384d8631779086055b2486b1a5956e9645650c3a57133356/
Threat name:
ByteCode-MSIL.Trojan.Masslogger
Create hunting rule
Status:
Malicious
First seen:
2020-07-17 16:35:05 UTC
AV detection:
15 of 29 (51.72%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=fs67rcjfbnwosocnqyyxpeegavnsjbvruwkw5fsfmugduvytgnla._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Unknown
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/2cbdf889250b6ce9384d8631779086055b2486b1a5956e9645650c3a57133356

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

7z 2cbdf889250b6ce9384d8631779086055b2486b1a5956e9645650c3a57133356

(this sample)

MassLogger

Executable exe a543d22347f54870ae7dc14964a0242bfee089214c900abe01d1da6e2fcea6cc

  
Dropping
MD5 cb0da230201048ec24ca733146c9d3ca
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a543d22347f54870ae7dc14964a0242bfee089214c900abe01d1da6e2fcea6cc

Comments