MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e791be548680d5d53a82788931e377a527d3f6bf690dc5c798ce1ef34a37fe92. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence File information Yara Comments

SHA256 hash: e791be548680d5d53a82788931e377a527d3f6bf690dc5c798ce1ef34a37fe92
SHA3-384 hash: 10e2d09351b5ba2e94a9ac77ea97d2b25ea22df7de93a23e37a87334187e57e058971c95996cc05684233b5834034df4
SHA1 hash: c44530d0a9fb053ef35f4e63a0277ec68075cd71
MD5 hash: 7ef6a1fc04113949a90fd2520c925956
humanhash: nevada-floor-tennessee-oxygen
File name:INQUIRY No. 310720205467_pdf.7z
Download: download sample
Signature MassLogger
File size:449'782 bytes
First seen:2020-07-31 12:16:44 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 6144:S1kXMJCChiSt6TTMbmsBTD1xg3+KO9szjhRjmpUbz/cZufaKF6qyotIVSsUT905P:SaWxhXnn1G3+KcsBtmg93Nyo/sUA1tEE
TLSH 1EA423096CF4C3CBFCEFA03643571752287A12C8EA29FA7E47DA1E5249F8EE55690C14
Reporter @abuse_ch
Tags:7z MassLogger


Twitter
@abuse_ch
Malspam distributing MassLogger:

HELO: electronics.local
Sending IP: 103.1.12.68
From: Rodrigo Peralta <rperalta@llorente.cl>
Reply-To: Rodrigo Peralta <soomla6384@yahoo.com>
Subject: AW: AW: Inquiry
Attachment: INQUIRY No. 310720205467_pdf.7z (contains "INQUIRY No. 310720205467_pdf.exe")

Intelligence


File Origin
# of uploads :
1
# of downloads :
34
Origin country :
FR FR
Mail intelligence
Geo location:
Global
Volume:
Low
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2020-07-31 12:18:09 UTC
AV detection:
13 of 48 (27.08%)
Threat level
  5/5
Threat name:
Legit
Score:
0.00

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

7z e791be548680d5d53a82788931e377a527d3f6bf690dc5c798ce1ef34a37fe92

(this sample)

  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment

Comments