MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 284ae70bb347ec422408b2651464cf7e80a8d8e8ae739e473ef2c40050b4e17f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 284ae70bb347ec422408b2651464cf7e80a8d8e8ae739e473ef2c40050b4e17f
SHA3-384 hash: 1f1a8bb88cc8aef977559ca111b52163f57598fc6bcb1624fe0641ce4d6bcaceeb7f64a35b02ca0658ddfeba12b436fd
SHA1 hash: 4e724f99a4e91f038becaf06c245d87c070883cd
MD5 hash: eeccc60e17d9627eede490e812e9edaa
humanhash: steak-edward-burger-king
File name:NEW PURCHASE ORDER NO.PO 4510040833 DATED 9.24.2020.pdf.r15
Download: download sample
Signature MassLogger
Create hunting rule
File size:755'587 bytes
First seen:2020-09-25 05:27:36 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:LIrUJIEwK57J5COBj2CEK9JN0+CkTCqux/QZRElM8ZZSOwIw9aXgHzf4ZkR:LIr3EwKRJNj2CpN0+Cker/QfEaUZAZHn
TLSH 48F433DBE6617FD34D25AF77189FA252989AA0C743503B30F032E141B905F6A8361AF7
Reporter cocaman
Tags:MassLogger r15


Avatar
cocaman
Malicious email (T1566.001)
From: ""Basem Shaban"<Battia@hydrotech-eg.com>"
Received: "from hydrotech-eg.com (unknown [45.11.19.134]) "
Date: "24 Sep 2020 19:15:49 -0700"
Subject: "FW: AW: Egyption Arab Contracting INVOICE REQUEST 3301 - TOP URGENT-"
Attachment: "NEW PURCHASE ORDER NO.PO 4510040833 DATED 9.24.2020.pdf.r15"

Intelligence

File Origin
# of uploads :
1
# of downloads :
87
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/284ae70bb347ec422408b2651464cf7e80a8d8e8ae739e473ef2c40050b4e17f/
Threat name:
ByteCode-MSIL.Infostealer.Stelega
Create hunting rule
Status:
Malicious
First seen:
2020-09-24 22:25:10 UTC
File Type:
Binary (Archive)
Extracted files:
16
AV detection:
15 of 29 (51.72%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=fbfooc5ti7weejaiwjsrizgpp2akrwhivzzz4rz66lcaaufu4f7q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
MassLogger
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/284ae70bb347ec422408b2651464cf7e80a8d8e8ae739e473ef2c40050b4e17f

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 284ae70bb347ec422408b2651464cf7e80a8d8e8ae739e473ef2c40050b4e17f

(this sample)

MassLogger

Executable exe 3662a3b002337c0da8ad94925e3c183f0a2d35b0932f9d40b89643335f10564d

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3662a3b002337c0da8ad94925e3c183f0a2d35b0932f9d40b89643335f10564d
  
Dropping
MassLogger

Comments