MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7a92b5d11b32d75f3bfa1d2de7c75d3016dd969b35de3cbcf49b809beffef7a1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7a92b5d11b32d75f3bfa1d2de7c75d3016dd969b35de3cbcf49b809beffef7a1
SHA3-384 hash: 9dd1312b9a54150c5af3ab1c0692700c04b437f8f20ad188779887ff4c200a0d9a153e3f9e8c989210fd41b9dece0501
SHA1 hash: b5a7701aaa16dcad1a221cbdc202a3d9c9291421
MD5 hash: 8cf6a0052fde3e4673ef4f6aed280fa8
humanhash: crazy-romeo-pasta-diet
File name:Image001.gz
Download: download sample
Signature MassLogger
Create hunting rule
File size:822'814 bytes
First seen:2020-08-08 08:14:33 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 24576:oXB6FGTtdHgXjM3mSz+9c7bmayCuyxxpNcvFo6o:oeuHgwF6aKaLuyxxp2vFo6o
TLSH B205339BDFCFA63D49F8D89B10303FA6B4389801D9A719DEFA277E5052D5C3998C8408
Reporter abuse_ch
Tags:gz MassLogger


Avatar
abuse_ch
Malspam distributing unidentified malware:

From: Bozhidar Nekeziev <bozhidar.nekeziev@monbat.com>
Subject: Re: Bank Transfer confirmation
Attachment: Image001.gz (contains "Image001.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
65
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7a92b5d11b32d75f3bfa1d2de7c75d3016dd969b35de3cbcf49b809beffef7a1/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-08-08 05:10:04 UTC
AV detection:
14 of 28 (50.00%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=pkjllui3gllv6o72duw6pr25galn3fu3gxpdzphutoajx37666qq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/7a92b5d11b32d75f3bfa1d2de7c75d3016dd969b35de3cbcf49b809beffef7a1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

gz 7a92b5d11b32d75f3bfa1d2de7c75d3016dd969b35de3cbcf49b809beffef7a1

(this sample)

MassLogger

Executable exe 3ba509359db69542f368af1d41dd8fa1c116e3e31ded1879872bb34a41f9cbbb

  
Dropping
MD5 e95f44d34431c8aeb81332e64a67ebe8
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3ba509359db69542f368af1d41dd8fa1c116e3e31ded1879872bb34a41f9cbbb

Comments