MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 14cfa5cbf65917ece32f9b3a70dd068b1b85e73c8a8f30a465f09d515db27bca. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 14cfa5cbf65917ece32f9b3a70dd068b1b85e73c8a8f30a465f09d515db27bca
SHA3-384 hash: 77bbe1e4eab6627402c79c66b715069ce4c23cfe8169909dbeac1501d64d50c7b6c5bc375f2d168df1f1f3633d140aa9
SHA1 hash: 1991877ebd7a48e758d582642cf684a5594db8b2
MD5 hash: 3a814121fb31b8b257a4164adf89bedc
humanhash: triple-fourteen-steak-april
File name:FV00620224400 009384766589 6645.r00
Download: download sample
Signature MassLogger
Create hunting rule
File size:6'534 bytes
First seen:2020-08-13 11:08:28 UTC
Last seen:Never
File type: r00
MIME type:application/x-rar
ssdeep 192:YY+yRMtRHcmZbFrRUpLNrNhXA81Li3aKsY:TRMtOyb/GL5NhQ8Q3lX
TLSH 3FD1BF453B696F1BA6A9223FAC52322DB23A3958E1F88ECC0715077FB0881F05F00868
Reporter abuse_ch
Tags:DHL MassLogger r00


Avatar
abuse_ch
Malspam distributing unidentified malware:

From: "DHL Customer Support" <luis_manzano_dhl@gmail.com>
Subject: DHL Failed Shipment Notification:6174333620
Attachment: FV00620224400 009384766589 6645.r00 (contains "FV00620224400 009384766589 6645.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
57
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/14cfa5cbf65917ece32f9b3a70dd068b1b85e73c8a8f30a465f09d515db27bca/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=cth2ls7wlel6zyzptm5hbxigrmnylzz4rkhtbjdf6covcxnsppfa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/14cfa5cbf65917ece32f9b3a70dd068b1b85e73c8a8f30a465f09d515db27bca

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

r00 14cfa5cbf65917ece32f9b3a70dd068b1b85e73c8a8f30a465f09d515db27bca

(this sample)

MassLogger

Executable exe d42e838fc8e2a07efdeb9ee11c8078d86ce797de599c633251927f6a24d7dea5

  
Dropping
MD5 f0e7185846d5e2918816fd651e9f178b
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d42e838fc8e2a07efdeb9ee11c8078d86ce797de599c633251927f6a24d7dea5

Comments