MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 047910d3743d642273b9edffe44a28541168a967b5e6c5fc7c1d97108cedf37d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 047910d3743d642273b9edffe44a28541168a967b5e6c5fc7c1d97108cedf37d
SHA3-384 hash: c4fbf0fa9379c61d5a311c94ce5bcf4cde91ee2d46687ff0e35d11ed379f36d4fde13f5b573bea1923c1140810f9de45
SHA1 hash: 6a82b5131be7123942266857c1e0778833d05501
MD5 hash: afc78ea20dc2714719fe6d7e3b7a0aba
humanhash: pluto-artist-texas-arkansas
File name:Swift copy.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:62'779 bytes
First seen:2020-10-22 11:54:42 UTC
Last seen:2020-10-23 12:54:23 UTC
File type: zip
MIME type:application/zip
ssdeep 1536:Mm3fYFS5FpXhkK/bkvuuy7qI8llkPQezZrGNg:tfK2XKKQGuy/VrGC
TLSH 3A53029E1C8FF7BBE3F40914B9F99283624448ABD4C13D1E5856F358CF06BC99641EA4
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: gmail.com
Sending IP: 185.222.57.73
From: iahbilatassad@yahoo.com
Subject: FW: Swift payment copy
Attachment: Swift copy.zip (contains "Swift copy.exe")

Intelligence

File Origin
# of uploads :
2
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.21743.ZipHeur.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/047910d3743d642273b9edffe44a28541168a967b5e6c5fc7c1d97108cedf37d/
Threat name:
ByteCode-MSIL.Infostealer.Maslog
Create hunting rule
Status:
Malicious
First seen:
2020-10-22 08:23:55 UTC
AV detection:
22 of 29 (75.86%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ar4rbu3uhvsce45z5x76isrikqiwrklhwxtml7d4dwlrbdhn6n6q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 047910d3743d642273b9edffe44a28541168a967b5e6c5fc7c1d97108cedf37d

(this sample)

MassLogger

Executable exe 075522bcd1e68ecf9dd038bcfc839f2112f32d0ee8c38028bcc054dbb0fccd67

  
Dropping
MD5 dd9561ecab9b2781cfb08e0c7cabfc45
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 075522bcd1e68ecf9dd038bcfc839f2112f32d0ee8c38028bcc054dbb0fccd67

Comments