MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d02c315a42a4a452a9e78011fbcce66f9f53bab788513d1b6f52e8fc70aa9f3c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence 2 File information 4 Yara Comments

SHA256 hash: d02c315a42a4a452a9e78011fbcce66f9f53bab788513d1b6f52e8fc70aa9f3c
SHA3-384 hash: 1f7e99c6da30acabac6b8de3f639ff91190660e067eab7ca80de70ec3c24f4f81e8a99820c1d06a3ffebe5f2a54bdbe8
SHA1 hash: f95d9e0be8191a2b3657584e5bcab782c1e36882
MD5 hash: 55126f1115a5e05fadd9d0f097273809
humanhash: may-idaho-emma-friend
File name:TECHNICAL SHEET.exe
Download: download sample
Signature MassLogger
File size:945'152 bytes
First seen:2020-06-30 06:41:26 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744
ssdeep 12288:y4uCw0P9D3NEvDQIzSpvMlkvakVn9GT5DeSFKfKEcb/j3IuDZ/D3V0K9TChQ7HVx:Ld9D3N6DQW4au9GT5DMBW7D3Hmcp9Uo
TLSH 99151212B2F6572AD0FE07F908B4124417B674426923E39ECEC5B5DA1EF27814B03B5B
Reporter @abuse_ch
Tags:exe MassLogger


Twitter
@abuse_ch
Malspam distributing MassLogger:

HELO: smtpout2.majordomo.ru
Sending IP: 78.108.80.156
From: aleshina@interpromtechnika.ru
Subject: New order PC00056942-OA3463-12
Attachment: RFQ PC00056942.zip (contains "TECHNICAL SHEET.exe")

MassLogger SMTP exfil server:
mail.mkontakt.az:587

Intelligence


Mail intelligence
Trap location Impact
Global Low
# of uploads 1
# of downloads 27
Origin country FR FR
CAPE Sandbox Detection:n/a
Link: https://www.capesandbox.com/analysis/16839/
ClamAV SecuriteInfo.com.MSIL.GenKryptik.ENGK.190.UNOFFICIAL
CERT.PL MWDB Detection:n/a
Link: https://mwdb.cert.pl/sample/d02c315a42a4a452a9e78011fbcce66f9f53bab788513d1b6f52e8fc70aa9f3c/
ReversingLabs :Status:Malicious
Threat name:ByteCode-MSIL.Trojan.Kryptik
First seen:2020-06-30 00:42:31 UTC
AV detection:20 of 31 (64.52%)
Threat level:   5/5
Spamhaus Hash Blocklist :Suspicious file
Hatching Triage Score:   10/10
Malware Family:masslogger
Link: https://tria.ge/reports/200630-e91lsmmmna/
Tags:ransomware spyware stealer family:masslogger
VirusTotal:Virustotal results 40.28%

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

Executable exe d02c315a42a4a452a9e78011fbcce66f9f53bab788513d1b6f52e8fc70aa9f3c

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments