MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1d614534bfdb031040611830c8b804c0244285adbe70c594870acfc73bc3cb8f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1d614534bfdb031040611830c8b804c0244285adbe70c594870acfc73bc3cb8f
SHA3-384 hash: aac10ff1402f9ae80803f77af1328cee030e439d1d77b688f9bfd53399d4fa0629c5d5e078054bb62eb926dc4ee17a8c
SHA1 hash: 72be903ffbed03f1c0a7561f15d6e0ba7bed6c2b
MD5 hash: c523d1cad73997d6d3d34624283291c1
humanhash: lion-rugby-speaker-echo
File name:FAU000000000.z
Download: download sample
Signature MassLogger
Create hunting rule
File size:773'120 bytes
First seen:2021-02-23 17:44:36 UTC
Last seen:2021-02-26 04:23:35 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:Yan3bsmeNJ1Ez5xcu8uMbV24YPl0N+AcUNPnEQLIc3Ft2MeawRV:YaYmeNJK45fbV2ft08AxNPJF7zW
TLSH 1AF43354C3712E8203A19DAD8473F8656A014935348D92BE68BE277CC78FB8F27D9D5C
Reporter GovCERT_CH

Intelligence

File Origin
# of uploads :
4
# of downloads :
92
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Downloader.Soft32downloader-6691270-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1d614534bfdb031040611830c8b804c0244285adbe70c594870acfc73bc3cb8f/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2021-02-23 14:48:49 UTC
AV detection:
10 of 46 (21.74%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=dvquknf73mbraqdbdaymroaeyasefbnnxzymlfehblh4oo6dzohq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
0.92
Link:
https://yomi.yoroi.company/submissions/1d614534bfdb031040611830c8b804c0244285adbe70c594870acfc73bc3cb8f

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 1d614534bfdb031040611830c8b804c0244285adbe70c594870acfc73bc3cb8f

(this sample)

MassLogger

Executable exe c102f6eeb3bc1106d4201200ca09a72f9b044448d1087db2568078489962563a

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c102f6eeb3bc1106d4201200ca09a72f9b044448d1087db2568078489962563a
  
Dropping
MD5 573b3716d15d5235f78865d50f12fd78

Comments