MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a238d109702667b33c62c8edcb134453d2ad51307ff3235f848c350be7168cc3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a238d109702667b33c62c8edcb134453d2ad51307ff3235f848c350be7168cc3
SHA3-384 hash: e3e2606f2f5e666ab8461239c81ba4cb8754ee2e9e0d1752ae6d732865dccd6302f868326e2e4b87c6854ca2d7408f49
SHA1 hash: 8f73c0fbc563c4cdbc6b3e4441f95de70244b1f6
MD5 hash: b7aa170e02d9e2aa07c9c45b3fffa462
humanhash: saturn-purple-video-mexico
File name:PO369273gz.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:652'476 bytes
First seen:2020-08-03 12:42:55 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:WrDO8myjGUtA20oG7GZN74x+wfrlH7gkP1ScD+q2ZaTkJVd6h4q0:W/OqjGUC2zG75xVpH57DAXc4
TLSH D3D423ECB6768814987EDD2346B3A80473811D6EE9BA452E1E13F9BE4ED3F1C32425C5
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

From: Yves Concil <yves.concil@kimco.be>
Subject: Purchase Order369273
Attachment: PO369273gz.zip (contains "369273 gz.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Fareit-FVT9A4EEC30210E.24987.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a238d109702667b33c62c8edcb134453d2ad51307ff3235f848c350be7168cc3/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-03 12:44:06 UTC
AV detection:
10 of 48 (20.83%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ui4ncclqezt3gpdczdw4we2ekpjk2ujqp7zsgx4erq2qxzywrtbq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/a238d109702667b33c62c8edcb134453d2ad51307ff3235f848c350be7168cc3

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip a238d109702667b33c62c8edcb134453d2ad51307ff3235f848c350be7168cc3

(this sample)

MassLogger

Executable exe 4882ceb8e3f4b34b1446518b39b4d878f59c3ef27124e38aefd67faa9200e127

  
Dropping
MD5 9a4eec30210edbe451087ea5947180bc
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4882ceb8e3f4b34b1446518b39b4d878f59c3ef27124e38aefd67faa9200e127

Comments