MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1bb0d3a2e4cc4722b1af8db12f0233938b10c629109fb75e584a4e690d9e77b9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1bb0d3a2e4cc4722b1af8db12f0233938b10c629109fb75e584a4e690d9e77b9
SHA3-384 hash: f592bd89926f239e13698b51b286c622b34be1045f8eacbfe345bee6e9e0bb53a6b68fd17d7b239e2964f537c5e7738e
SHA1 hash: 4a44c895c7564c9df339cd1ac5fcb442dfe01391
MD5 hash: bcd0edb6557dc6ac5b9d43d1b370ffec
humanhash: nebraska-pip-batman-item
File name:PO NOAB1088 Microfinish Valves Pvt Ltd.pdf.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:570'211 bytes
First seen:2020-07-13 05:24:54 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:NwijRYgF85hm3HDmJL8jQPiPS2hpQnectG:ND58Cs8jQPES2hpEg
TLSH 3BC42365968C4889977DC0FBEE5BE5291E61E59F89CAF0E244D2121A013FC1ECCB35B3
Reporter cocaman
Tags:MassLogger zip


Avatar
cocaman
Malicious email
From: "Mr. VIKAS C E" <mvplproc@microfinishgroup.com>
Received: from microfinishgroup.com (unknown [185.222.57.154])
Date: 12 Jul 2020 18:02:18 -0700
Subject: RE: PO NO:AB1088 // Microfinish Valves Pvt Ltd
Attachment: PO NOAB1088 Microfinish Valves Pvt Ltd.pdf.zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25518.ZipHeur.Ext.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1bb0d3a2e4cc4722b1af8db12f0233938b10c629109fb75e584a4e690d9e77b9/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-07-13 05:26:06 UTC
File Type:
Binary (Archive)
Extracted files:
40
AV detection:
20 of 48 (41.67%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=doynhixezrdsfmnprwys6artsofrbrrjccp3oxsyjjhgsdm6o64q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 1bb0d3a2e4cc4722b1af8db12f0233938b10c629109fb75e584a4e690d9e77b9

(this sample)

MassLogger

Executable exe 1b63db723d1957b88d6199fb5ea958f28de43333d2482a137c5b73b8be78a4a0

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 1b63db723d1957b88d6199fb5ea958f28de43333d2482a137c5b73b8be78a4a0
  
Dropping
MassLogger

Comments