MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7809213c9557db2f152b7b1a259e8ed352ac27270e623d1c780e3cfd32ac14b0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7809213c9557db2f152b7b1a259e8ed352ac27270e623d1c780e3cfd32ac14b0
SHA3-384 hash: b9806630aa79b5bfa2bca23f093f1083a55b7dbbf43ee39f6d59e91072873ae06aa14729e801c5cf34e70fd0d8977e25
SHA1 hash: c22919c141b088be003cf73ab2ddac830e4a5637
MD5 hash: 28ef74e90e584394dfa721b8b3c8dccd
humanhash: harry-river-princess-mississippi
File name:Our New Order June 016 2020 at 2.31_PVV440_PDF.img
Download: download sample
Signature MassLogger
Create hunting rule
File size:1'376'256 bytes
First seen:2020-06-16 14:05:12 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:L7P45E8WOqQ0HB+1fWw9FWXF+VZdX8wfMLvDMYoFOldj+NmLBOx5:LD45nibHrDudXdfMLvDZKOPCNtx
TLSH A05523A133D983C5F5B80FBA3832624097BDB2272125D71E7D8D158E5BB6BC486607B3
Reporter abuse_ch
Tags:img MassLogger


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: torrespardo.ncloud.es
Sending IP: 185.57.172.23
From: Makilov Versiley <direccion@eucov.com>
Subject: RE: AW: Our New Order No. 155717
Attachment: Our New Order June 016 2020 at 2.31_PVV440_PDF.img (contains "Our New Order June 016 2020 at 2.31_PVV440_PDF.exe")

MassLogger SMTP exfil server:
mail.kogep-k.hu:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Genkryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-16 14:07:03 UTC
AV detection:
16 of 31 (51.61%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=paescpevk7ns6fjlpmnclhuo2njkyjzhbzrd2hdyby6p2mvmcsya._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

img 7809213c9557db2f152b7b1a259e8ed352ac27270e623d1c780e3cfd32ac14b0

(this sample)

MassLogger

Executable exe 110e9666025176f94b715b77f8677d5eb9049c6a79d61716be8e1646b70b36bb

  
Dropping
MD5 2bd29021de1827a18eb2ba749724809a
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 110e9666025176f94b715b77f8677d5eb9049c6a79d61716be8e1646b70b36bb

Comments