MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9662d056453bd0560d13419554260695409e91bb7c915e965adc4e9aefa41840. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9662d056453bd0560d13419554260695409e91bb7c915e965adc4e9aefa41840
SHA3-384 hash: 5f8feeab29268c2bbe863d06d50390337d05bf7a8314401d9fe80b0d0d8c75b9dd486298a189f88dcc00d4336e982784
SHA1 hash: 30a9311e31941de707bbf89d36d7892aedd26680
MD5 hash: 58e7c541a816b7d2bc2593d7c66d98f4
humanhash: mike-comet-speaker-failed
File name:New Order.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:907'576 bytes
First seen:2020-08-05 07:49:05 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:4GsmJQ7NULtLsWAwaAYB/eDaXaLk91ixRF8:99wNyLVKJMo1ip8
TLSH 131523C78274ED3B19E5F0EF2E731112E7820B6E2B558A39CE5BC44D2950D9D3F49982
Reporter abuse_ch
Tags:MassLogger rar


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: s111-ir-cpanel-trade.maindns.net
Sending IP: 185.165.116.18
From: Ana kersen <info.primafit@gmail.com>
Reply-To: info@primafit.co.id
Subject: Re:New Order
Attachment: New Order.rar (contains "BGT74 NEW89.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9662d056453bd0560d13419554260695409e91bb7c915e965adc4e9aefa41840/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-08-05 04:26:28 UTC
AV detection:
17 of 48 (35.42%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=szrnavsfhpifmditigkvijqgsvaj5en3psiv5fs23rhjv35edbaa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/9662d056453bd0560d13419554260695409e91bb7c915e965adc4e9aefa41840

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 9662d056453bd0560d13419554260695409e91bb7c915e965adc4e9aefa41840

(this sample)

MassLogger

Executable exe e9ca08e9192adcb0c65eae06bbc2ba1439b2615aeefee53a7cb26f15d691c071

  
Dropping
MD5 a2aa936eae36cd8eeb3615d8b822d4f8
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e9ca08e9192adcb0c65eae06bbc2ba1439b2615aeefee53a7cb26f15d691c071

Comments