MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e791be548680d5d53a82788931e377a527d3f6bf690dc5c798ce1ef34a37fe92. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e791be548680d5d53a82788931e377a527d3f6bf690dc5c798ce1ef34a37fe92
SHA3-384 hash: 10e2d09351b5ba2e94a9ac77ea97d2b25ea22df7de93a23e37a87334187e57e058971c95996cc05684233b5834034df4
SHA1 hash: c44530d0a9fb053ef35f4e63a0277ec68075cd71
MD5 hash: 7ef6a1fc04113949a90fd2520c925956
humanhash: nevada-floor-tennessee-oxygen
File name:INQUIRY No. 310720205467_pdf.7z
Download: download sample
Signature MassLogger
Create hunting rule
File size:449'782 bytes
First seen:2020-07-31 12:16:44 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 6144:S1kXMJCChiSt6TTMbmsBTD1xg3+KO9szjhRjmpUbz/cZufaKF6qyotIVSsUT905P:SaWxhXnn1G3+KcsBtmg93Nyo/sUA1tEE
TLSH 1EA423096CF4C3CBFCEFA03643571752287A12C8EA29FA7E47DA1E5249F8EE55690C14
Reporter abuse_ch
Tags:7z MassLogger


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: electronics.local
Sending IP: 103.1.12.68
From: Rodrigo Peralta <rperalta@llorente.cl>
Reply-To: Rodrigo Peralta <soomla6384@yahoo.com>
Subject: AW: AW: Inquiry
Attachment: INQUIRY No. 310720205467_pdf.7z (contains "INQUIRY No. 310720205467_pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27382.Rar5Heur.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e791be548680d5d53a82788931e377a527d3f6bf690dc5c798ce1ef34a37fe92/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-07-31 12:18:09 UTC
AV detection:
13 of 48 (27.08%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=46i34vegqdk5koucpcetdy3xuut5h5v7neg4lr4yzyppgsrx72ja._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/e791be548680d5d53a82788931e377a527d3f6bf690dc5c798ce1ef34a37fe92

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

7z e791be548680d5d53a82788931e377a527d3f6bf690dc5c798ce1ef34a37fe92

(this sample)

MassLogger

Executable exe dccd0903a7912382f20b16beb29d93c14435e41ee655c2e88740879089d56fca

  
Dropping
MD5 618c581392b7271abdf40a8b376e8324
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 dccd0903a7912382f20b16beb29d93c14435e41ee655c2e88740879089d56fca

Comments