MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fbb52595c5e7b39a27f725a8d848ac5a07579ae8b3ae93b9e87894a29d185a99. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fbb52595c5e7b39a27f725a8d848ac5a07579ae8b3ae93b9e87894a29d185a99
SHA3-384 hash: 4f0a3767eedb80924422ff45325711103a8c82d8906b54210f10a5dfd4c5db322333e61fe5ad39b8ad3aa7f669ce4a2c
SHA1 hash: f76409c2f12fbc7af80c7b5b32cf663c905d173a
MD5 hash: 072147663c746599d7a8492615c0e0fb
humanhash: william-eight-beryllium-timing
File name:Ödeme bildirimi onayı.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:649'096 bytes
First seen:2020-08-05 09:10:19 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:Tyz6Cr9wD9+A2W492+/5MB4CUPFC5NIcIaKmX8/PukdU0jicuPKwFl47FXTJ3cR+:+W29M8HWG1/qqvQzIcIamP7ddjicuPn+
TLSH 83D423C9AA4553117BD58B632DA84EB19E82C413B4CDC07D2CDBAF6A687231CB48ED5C
Reporter abuse_ch
Tags:geo MassLogger TUR zip


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: minima.net.gr
Sending IP: 138.201.180.106
From: Mustafa TÜRK <mturk67@gmail.com>
Subject: Ödeme bildirimi onayı
Attachment: Ödeme bildirimi onayı.zip (contains "Ödeme bildirimi onayı.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
54
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/fbb52595c5e7b39a27f725a8d848ac5a07579ae8b3ae93b9e87894a29d185a99/
Threat name:
ByteCode-MSIL.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-08-05 09:12:06 UTC
AV detection:
6 of 48 (12.50%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=7o2slfof46zzuj7xewunqsfmlidvpgxiwoxjhopipckkfhiylkmq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/fbb52595c5e7b39a27f725a8d848ac5a07579ae8b3ae93b9e87894a29d185a99

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip fbb52595c5e7b39a27f725a8d848ac5a07579ae8b3ae93b9e87894a29d185a99

(this sample)

MassLogger

Executable exe e387e96aeb069a6060b78456f7cac7be958a23a617ef2b6adc6caf3db23ce8b4

  
Dropping
MD5 8d49de8ed3d8d627bb0cb0d8a219b4ad
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e387e96aeb069a6060b78456f7cac7be958a23a617ef2b6adc6caf3db23ce8b4

Comments