MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 12e063fa87cf457809c5ccc5e850c2f471bfedec9237d611903691e8ba604ee3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 12e063fa87cf457809c5ccc5e850c2f471bfedec9237d611903691e8ba604ee3
SHA3-384 hash: 985a59e0d7385eb0ae167a6a9d06530083e3dbf3299f7ccacfa89c107e39e7e2aa173f6ccc993d842be852732b24656c
SHA1 hash: a0e43f9f9d1748f60c123a8a7f693e25f5789bec
MD5 hash: 4157fd00157c2c6d4e6e47392c913d74
humanhash: california-football-pasta-oscar
File name:Wsp1Y2kaMZ5npFn.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:718'719 bytes
First seen:2020-09-29 05:28:59 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:NfKnyl+6CIJ6G+6bPV6cbFnKEkxOGPOBpeliMPCS9N+WfukHloV:NiM+6N6CPV6cbFHGPVlXz+0HG
TLSH 7DE42376D89C2C8829FA60B71F7AD6AC668E3E317B35D07B5A36C5FB175398428C10D0
Reporter cocaman
Tags:MassLogger rar SWIFT


Avatar
cocaman
Malicious email (T1566.001)
From: "Jean Carlo Garcia <jira@xima-services.de>"
Received: "from mail.aktio.co.jp (unknown [59.106.218.104]) "
Date: "28 Sep 2020 17:31:00 -0700"
Subject: "Swift-Print View"
Attachment: "Wsp1Y2kaMZ5npFn.rar"

Intelligence

File Origin
# of uploads :
1
# of downloads :
87
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/12e063fa87cf457809c5ccc5e850c2f471bfedec9237d611903691e8ba604ee3/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-09-29 00:07:44 UTC
File Type:
Binary (Archive)
Extracted files:
10
AV detection:
7 of 48 (14.58%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=clqgh6uhz5cxqcofztc6qugc6ry373pmsi35memqg2i6rotaj3rq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/12e063fa87cf457809c5ccc5e850c2f471bfedec9237d611903691e8ba604ee3

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 12e063fa87cf457809c5ccc5e850c2f471bfedec9237d611903691e8ba604ee3

(this sample)

MassLogger

Executable exe 6030faadae8d2aa1b94b06da9c0d4ed3ce33076a1bc04218027519b1043a6a95

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 6030faadae8d2aa1b94b06da9c0d4ed3ce33076a1bc04218027519b1043a6a95
  
Dropping
MassLogger

Comments