MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e7db55f40cecf0edd8be2fc73b1d56ba1f3cf0c0c5b0b27ed74a1acfb3574a86. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e7db55f40cecf0edd8be2fc73b1d56ba1f3cf0c0c5b0b27ed74a1acfb3574a86
SHA3-384 hash: e3b2d9a7ae7e012804bbf76e420804429b65ffc986792c9516358272d88e450ad2a82a6ebe19dec23b94408b243020a2
SHA1 hash: 35a5dba80d234ec6491fe30bfbe9dfa2729b6fc7
MD5 hash: 5b59be8c35648ea662650c0fea6bfaab
humanhash: hydrogen-fillet-oxygen-hydrogen
File name:Purchae required and shipment details.gz
Download: download sample
Signature MassLogger
Create hunting rule
File size:597'368 bytes
First seen:2020-07-02 07:40:33 UTC
Last seen:2020-07-02 14:45:52 UTC
File type: gz
MIME type:application/x-rar
ssdeep 12288:U1Soj9fRyJ6wfjVXGAdfkex3tH3HmaxkVMJDhE5iVKLlUOVEYp48+s:U1Soj9fRycw9GAVkQiVOL6UOFp48x
TLSH 49D4232912527C6B3A9131F55289800B96CC8C16FAF477C2BC5CEF752B91C694B6E3BC
Reporter cocaman
Tags:gz MassLogger


Avatar
cocaman
Malicious email
From: Dorothy Hwang<hycsen@winnerpp.com.hk>
Received: from winnerpp.com.hk (unknown [180.214.239.234])
Date: 01 Jul 2020 23:22:54 -0700
Subject: Re: New Inquiry Purchase
Attachment: Purchae required and shipment details.gz

Intelligence

File Origin
# of uploads :
2
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e7db55f40cecf0edd8be2fc73b1d56ba1f3cf0c0c5b0b27ed74a1acfb3574a86/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-02 07:17:41 UTC
File Type:
Binary (Archive)
Extracted files:
5
AV detection:
19 of 28 (67.86%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=47nvl5am5tyo3wf6f7dtwhkwxiptz4gaywyle7wxjinm7m2xjkda._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

gz e7db55f40cecf0edd8be2fc73b1d56ba1f3cf0c0c5b0b27ed74a1acfb3574a86

(this sample)

MassLogger

Executable exe 41df7c7f04b04ac0f2eb88f099c9df36f01e11eaff1c189573f49054758d653d

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 41df7c7f04b04ac0f2eb88f099c9df36f01e11eaff1c189573f49054758d653d

Comments