MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5ab93ef45e2341d3769d642d23725a40fc9ebb93f0cced4f93da75003bfb16be. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5ab93ef45e2341d3769d642d23725a40fc9ebb93f0cced4f93da75003bfb16be
SHA3-384 hash: cc16e0f3ff64c04be4bb37657e40bae84dc5cbca0ab0572cb5f9fc8e24c85ea96571a74a23b8ef127712f07ef81372f3
SHA1 hash: ae7271919b53615d84d6797a2a0c8c21ca38dc0b
MD5 hash: 40c4bf22b5f6c5c87c3db0a94309145e
humanhash: single-utah-steak-glucose
File name:doc20200812_00000187990091.xlsx.z
Download: download sample
Signature MassLogger
Create hunting rule
File size:854'950 bytes
First seen:2020-08-13 07:35:31 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:jtVeDpwVhnkJkxvFtTFXWNRmODUqGbY9jZQs7yWRg/RKDQJx5AwbXQCVk78fKTMM:jtkDpqnPVRX8mJqGAjZQsVg/WOzvKg+1
TLSH EF053347AA82F8491616F1F0A3F65CEB69C570F4EFB0C4FE148840E49E2F7A65E99407
Reporter abuse_ch
Tags:MassLogger z


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: hyhgcn.com
Sending IP: 156.96.62.199
From: Jessica Zha <jessica@hyhgcn.com>
Reply-To: ital_rnachine2013@yahoo.com
Subject: 引用
Attachment: doc20200812_00000187990091.xlsx.z (contains "doc20200812_00000187990091.xlsx.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.26027.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5ab93ef45e2341d3769d642d23725a40fc9ebb93f0cced4f93da75003bfb16be/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-08-13 00:47:06 UTC
AV detection:
22 of 29 (75.86%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=lk4t55c6ena5g5u5mqwsg4s2id6j5o4t6dgo2t4t3j2qao73c27a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/5ab93ef45e2341d3769d642d23725a40fc9ebb93f0cced4f93da75003bfb16be

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 5ab93ef45e2341d3769d642d23725a40fc9ebb93f0cced4f93da75003bfb16be

(this sample)

MassLogger

Executable exe 35b6e2b8511ae0552a5de87abc510205a9d52a53ca6ed78b44299a31138475c8

  
Dropping
MD5 85b2da66be368bd544610451b942207f
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 35b6e2b8511ae0552a5de87abc510205a9d52a53ca6ed78b44299a31138475c8

Comments