MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 132c2e9bd568702661d78e553ac9167747d005f823418901fed0045ae79288e0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 132c2e9bd568702661d78e553ac9167747d005f823418901fed0045ae79288e0
SHA3-384 hash: 31461a0adf725fdfdf08bfb3397d65bf7f48da9910a4f01228aa50e15d9d3cbe6e55de3a2ba736dce0cf699a18886574
SHA1 hash: dbf81e9752169ed8723a527cd7525c86fa7ebc9c
MD5 hash: 9405f6d03898df41b02c534dfbbb81cf
humanhash: idaho-zulu-magnesium-july
File name:INV_0086745220.pdf.z
Download: download sample
Signature MassLogger
Create hunting rule
File size:802'659 bytes
First seen:2020-10-26 10:08:38 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 12288:X4tVxCZ+nRPBEPckoaEccg4zb6R9f21zA9URgX5Dle2cS0pz:+CEuboaCJbb1zA+gpDlef1
TLSH F6053378E4C9736A1D4F561A8772712243EA2687585595DAF6C3100F37AE32326CCECF
Reporter abuse_ch
Tags:MassLogger z


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: serverm.everywhere.co.za
Sending IP: 41.185.22.114
From: raul@kinetic.co.za
Subject: Invoice Confirmation
Attachment: INV_0086745220.pdf.z (contains "INV_0086745220.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/132c2e9bd568702661d78e553ac9167747d005f823418901fed0045ae79288e0/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-10-25 23:36:52 UTC
AV detection:
19 of 29 (65.52%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=cmwc5g6vnbycmyoxrzktvsiwo5d5abpyenaysap62acfvz4srdqa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

z 132c2e9bd568702661d78e553ac9167747d005f823418901fed0045ae79288e0

(this sample)

MassLogger

Executable exe 263fefe63ffef92b66516f9de917b4af09783ef5e3b6ba93b030d91c624c7925

  
Dropping
MD5 691a11ba03ee1143355a66e4776882e6
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 263fefe63ffef92b66516f9de917b4af09783ef5e3b6ba93b030d91c624c7925

Comments