MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 734a691f0085ffd15946a8a5cea81b354aefce10760fc62d10dd046623514fd6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 734a691f0085ffd15946a8a5cea81b354aefce10760fc62d10dd046623514fd6
SHA3-384 hash: 8c2fc11b8b5ca8ec1ceee691914e33fe8a75442d7e5fa50a5740aa92c43465b50e3d9ed2d45215073e31313780e0ab0c
SHA1 hash: b9fdc1c8825fc283e26954c3edb5d055297b733f
MD5 hash: 0ca1889bdd27a5593b508e977137ecfe
humanhash: two-harry-utah-fillet
File name:NARUČIVANJE U NEDELJI U OŽUJKU 2020.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:666'305 bytes
First seen:2020-06-02 11:58:42 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:d6LB39n7EKKqGid2b/Q0Y3Q3M7CM7HXmuaMz5ZQMfCZrvpMqollTzmf:275h4/Q0YgM7CM7HXmuaMzMMaFxMqol2
TLSH D9E423AFE931C751BAE6A15640538F7B650BD2D9724B07EA260333C1F658E2FA417C38
Reporter abuse_ch
Tags:geo HRC MassLogger zip


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: hosting12.ji-net.com
Sending IP: 203.130.149.250
From: Marina Hrvoić <marinaplantaze@gmail.com>
Subject: Re: [RFQ]: NARUČIVANJE U NEDELJI U OŽUJKU 2020
Attachment: NARUČIVANJE U NEDELJI U OŽUJKU 2020.zip (contains "NARUČIVANJE U NEDELJI U OŽUJKU 2020.exe")

MassLogger FTP exfil server:
desguacespalomino.com:21

Intelligence

File Origin
# of uploads :
1
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Genkryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-02 12:37:17 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
18 of 48 (37.50%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=onfgshyaqx75cwkgvcs45ka3gvfo7tqqoyh4mliq3ucgmi2rj7la._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 734a691f0085ffd15946a8a5cea81b354aefce10760fc62d10dd046623514fd6

(this sample)

MassLogger

Executable exe 4258daa1c36c896d0c4998c61f47939ff18c1b558e446327dd6146d6e709d9ba

  
Dropping
MD5 43cd8c82764e33687f3fc9dc8e76baea
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4258daa1c36c896d0c4998c61f47939ff18c1b558e446327dd6146d6e709d9ba

Comments