MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 084e64ace5eb934f3cbdecdddeb6aff1e0ef79f32f84844b6bee1ef9b1d3e44a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 084e64ace5eb934f3cbdecdddeb6aff1e0ef79f32f84844b6bee1ef9b1d3e44a
SHA3-384 hash: 0da6c8ccf5034784906a45c2fd17ae4bc343c7590773b4f20127624c88863e2fec9044ff06b20694efd3dfcf84c62305
SHA1 hash: 5e61de38e58e033ba1a325f4f4fa9541e87443fc
MD5 hash: 50ee47d9909119798a1c7aa5b0201e60
humanhash: helium-massachusetts-triple-pennsylvania
File name:Kundenwunsch%0D%0A 00235257.r00
Download: download sample
Signature MassLogger
Create hunting rule
File size:5'807 bytes
First seen:2020-07-23 08:01:11 UTC
Last seen:Never
File type: r00
MIME type:application/x-rar
ssdeep 96:LIs8X0I8snL7BsI/Wn9HFxhSS8Mapucgvx5mwuMDDkFQXDWjPcEE:Ll80ML7BsISgMEOmrMTWjPPE
TLSH 2FC18E94057CB3E16A118EB5225FA371178439E39075A1AE81EE109067B3DEACFEA743
Reporter cocaman
Tags:MassLogger r00


Avatar
cocaman
Malicious email
From: Ursula Eigenmann <basel@haascompany.ch>
Received: from correo.atlanticonsultores.com (mail.atlanticonsultores.com [82.194.82.36])
Date: Thu, 23 Jul 2020 07:54:26 +0000
Subject: HAAS & COMPANY AG - Kundenwunsch: 00235257
Attachment: Kundenwunsch
00235257.r00

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/084e64ace5eb934f3cbdecdddeb6aff1e0ef79f32f84844b6bee1ef9b1d3e44a/
Threat name:
ByteCode-MSIL.Downloader.Small
Create hunting rule
Status:
Malicious
First seen:
2020-07-23 08:03:05 UTC
File Type:
Binary (Archive)
Extracted files:
3
AV detection:
16 of 29 (55.17%)
Threat level:
  3/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=bbhgjlhf5oju6pf55to55nvp6hqo66ptf6ciis3l5ypptmot4rfa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Neurevt
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/084e64ace5eb934f3cbdecdddeb6aff1e0ef79f32f84844b6bee1ef9b1d3e44a

File information

The table below shows additional information about this malware sample such as delivery method and external references.

MassLogger

r00 084e64ace5eb934f3cbdecdddeb6aff1e0ef79f32f84844b6bee1ef9b1d3e44a

(this sample)

MassLogger

Executable exe bc4eb9e6d6e0b8e74778806de3a392800a98eb1460a56f38c523262277af1bac

  
Delivery method
Other
  
Dropping
SHA256 bc4eb9e6d6e0b8e74778806de3a392800a98eb1460a56f38c523262277af1bac
  
Dropping
MassLogger

Comments