MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5babe1e9b8be61accab51cb323811a34517308d65058626a5a5b0f3ff7981f41. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5babe1e9b8be61accab51cb323811a34517308d65058626a5a5b0f3ff7981f41
SHA3-384 hash: 3cc7fe71b5d62f50afe1126b08738033ff26c09fcd857a82c418766f616359f78b84c22b064b5bf96ed2eca5bafda540
SHA1 hash: 8aa016269acb46a939739db4c5133466d3257574
MD5 hash: 21d2f7b312ef5dd2cac072b93e3742d1
humanhash: diet-helium-yankee-ack
File name:PO28573310.gz
Download: download sample
Signature MassLogger
Create hunting rule
File size:579'623 bytes
First seen:2020-08-04 13:30:04 UTC
Last seen:Never
File type: gz
MIME type:application/gzip
ssdeep 12288:EiBPLa4iltuvnpyCzlmwYRnBlgchc3qrhKaRFxUPoKeW:TBGhtuxXlmRhcshtg
TLSH 81C4234DB334795865ECADA423E07D8A07D8A5E7330239266F9505F029770EA709E27F
Reporter abuse_ch
Tags:gz HostGator MassLogger


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: gateway20.websitewelcome.com
Sending IP: 192.185.59.4
From: Guowei <webmaster@isofood.net>
Subject: Re :Re :New Order PO28573310
Attachment: PO28573310.gz (contains "PO28573310.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
65
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Fareit-FVT7AABC8428097.9887.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5babe1e9b8be61accab51cb323811a34517308d65058626a5a5b0f3ff7981f41/
Threat name:
ByteCode-MSIL.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-08-04 13:31:07 UTC
AV detection:
20 of 48 (41.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=lov6d2nyxzq2zsvvdszshai2grixgcgwkbmge2s2lmht754yd5aq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
0.78
Link:
https://yomi.yoroi.company/submissions/5babe1e9b8be61accab51cb323811a34517308d65058626a5a5b0f3ff7981f41

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

gz 5babe1e9b8be61accab51cb323811a34517308d65058626a5a5b0f3ff7981f41

(this sample)

MassLogger

Executable exe 202b6460412616a353d08217c32a0ba18305ea7819296871c16e1a0890c38853

  
Dropping
MD5 7aabc84280972309334c64a4c684df48
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 202b6460412616a353d08217c32a0ba18305ea7819296871c16e1a0890c38853

Comments