MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f9abeb7ba32ac4b84d855503d607cfe2fc79f147512db0871a262d53c560c5c1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f9abeb7ba32ac4b84d855503d607cfe2fc79f147512db0871a262d53c560c5c1
SHA3-384 hash: 164d75b76c881562409af40784ce2ee90a6b2797dc09159e6320628c9dfb2082044b6fd8c2357f2badc03c8d66c6f9ae
SHA1 hash: 8866b139ff9512debf0abf4cc50ec55cda88f265
MD5 hash: bb5d4969a5156c1977998cce74f4624e
humanhash: earth-illinois-leopard-twenty
File name:catalogues lists.r00
Download: download sample
Signature MassLogger
Create hunting rule
File size:809'891 bytes
First seen:2020-06-26 07:13:11 UTC
Last seen:Never
File type: r00
MIME type:application/x-rar
ssdeep 24576:1xdJoNdrbLjGwV7Q/Amlbe+CUyS8wc3schK4lvp8Ez:1Tq/bLjGwVM/ns+C9S8w4S4BCU
TLSH A80523AC39EBBD4E72A71B664564BC7300A40FEE1938A6D348DD2806B6CDD2970DB474
Reporter abuse_ch
Tags:MassLogger r00


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: srvc93.trwww.com
Sending IP: 37.230.110.159
From: Nancy Stevens <sales@kater.com.tr>
Subject: Business Cooperation.
Attachment: catalogues lists.r00 (contains "catalogues lists.exe")

MassLogger SMTP exfil server:
mail.cyberclone.biz:26

MassLogger SMTP exfil email address:
sales@cyberclone.biz

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f9abeb7ba32ac4b84d855503d607cfe2fc79f147512db0871a262d53c560c5c1/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-26 07:15:05 UTC
AV detection:
17 of 31 (54.84%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=7gv6w65dflclqtmfkub5mb6p4l6ht4khkew3bby2eywvhrlayxaq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

r00 f9abeb7ba32ac4b84d855503d607cfe2fc79f147512db0871a262d53c560c5c1

(this sample)

MassLogger

Executable exe 1a1e5e11d4fc8b5b0b1b8d7ba56879a75c9079aa63c613d2f266a1b84bc15cfd

  
Dropping
MD5 f6d7d69e4daa79e5a61cee1dd563f372
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 1a1e5e11d4fc8b5b0b1b8d7ba56879a75c9079aa63c613d2f266a1b84bc15cfd

Comments