MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a1be9ca3d1ee2083aefe9b4e93fca9746d38de3d7b3383848375672f768d31ff. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a1be9ca3d1ee2083aefe9b4e93fca9746d38de3d7b3383848375672f768d31ff
SHA3-384 hash: f0ec598b59336d54e565c42842f318e439cac91129c456895dbe3cec3b7564f7180ce251d578d7bae21407abe89bd04b
SHA1 hash: 69de379894cf4a42b4fab566d0a6b02e7451c216
MD5 hash: 61619fe33ca8624afa59373761b67322
humanhash: romeo-earth-wolfram-minnesota
File name:doc07675720200626101857.r01
Download: download sample
Signature MassLogger
Create hunting rule
File size:605'580 bytes
First seen:2020-07-08 09:57:05 UTC
Last seen:Never
File type: r01
MIME type:application/x-rar
ssdeep 12288:4UuBaH9FgdENoJAy82ZMuSELLu4wj3l6WMp3H8CEX04U8:AadFgENoJp82ZxSEPZwjV6B3604B
TLSH 1AD4239317E5A579593B072167F026B3EE249F445297A17F1600B82FB8C739EC1309AF
Reporter cocaman
Tags:MassLogger r01


Avatar
cocaman
Malicious email
From: Sales <info@deseninsaatelektrik.com.tr>
Received: from mail.ihszimbra17.com (mail.ihszimbra17.com [94.138.192.204])
Date: Wed, 08 Jul 2020 08:57:37 +0200
Subject: Urgent request
Attachment: doc07675720200626101857.r01

Intelligence

File Origin
# of uploads :
1
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a1be9ca3d1ee2083aefe9b4e93fca9746d38de3d7b3383848375672f768d31ff/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-08 09:59:04 UTC
File Type:
Binary (Archive)
Extracted files:
63
AV detection:
28 of 48 (58.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ug7jzi6r5yqihlx6tnhjh7fjorwtrxr5pmzyhbedovts65ungh7q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

r01 a1be9ca3d1ee2083aefe9b4e93fca9746d38de3d7b3383848375672f768d31ff

(this sample)

MassLogger

Executable exe 420da876f8efdf70da0ec0ccd1b7aaa09547b6868d5fc655c05b50eadf20c360

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 420da876f8efdf70da0ec0ccd1b7aaa09547b6868d5fc655c05b50eadf20c360

Comments