MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8eb48dc7cab80734e38199367de43421aebe7c92e036e056c9f7ce69378eef43. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8eb48dc7cab80734e38199367de43421aebe7c92e036e056c9f7ce69378eef43
SHA3-384 hash: 06a800d02647190262d181444fc23ea8cbc87c2e4e113e1b1284ccbe0d6e7cc8bb579a6f613d94df3124d233151e5560
SHA1 hash: 5cc0989071f6c3ab2ed1b8c4052b0d38b8a2cc55
MD5 hash: 1b0410371ef6b8fa294ab12e2ed92028
humanhash: delaware-failed-north-mirror
File name:Order 26-06-2020 PDF.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:855'838 bytes
First seen:2020-06-26 05:09:34 UTC
Last seen:2020-06-26 20:25:28 UTC
File type: rar
MIME type:application/x-rar
ssdeep 12288:8H2o7b/Y6Liwxfl7aNSmiQhZ8slHeondM8ZSEyBrLuUp+G1HDGmCI5DGfTOVH61t:sRLRxfZmthZjl+qd9ZvwXSzI5DGfiWD
TLSH 340533E133165DEC5A87C3FCD22E606AD537D3F41BC287A44AA10C977A6C390EA35698
Reporter jarumlus

Intelligence

File Origin
# of uploads :
2
# of downloads :
65
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8eb48dc7cab80734e38199367de43421aebe7c92e036e056c9f7ce69378eef43/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-26 05:11:04 UTC
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=r22i3r6kxadtjy4bte3h3zbuegxl47es4a3oavwj67hgsn4o55bq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 8eb48dc7cab80734e38199367de43421aebe7c92e036e056c9f7ce69378eef43

(this sample)

MassLogger

Executable exe 296b2d6c24dd68f7a59ea4388d979bba6572c288ab891cd35ec81e56c602318d

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 296b2d6c24dd68f7a59ea4388d979bba6572c288ab891cd35ec81e56c602318d
  
Dropping
MD5 5871c56853982658b13619b6beae47da

Comments