MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 37b9d4020b9d37cce05a757dcc415b09b342e9306deec41c63be46f0b089d725. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 37b9d4020b9d37cce05a757dcc415b09b342e9306deec41c63be46f0b089d725
SHA3-384 hash: 95f5de6072e02e826d4d782ab8e67b01e55340811f4c1e3ca1c7ed14bbbd37f2659660ee470fd7dbe3705e5bde39e6bc
SHA1 hash: 683c69d25d302eaa68f1fc0b675f39813baaf9c2
MD5 hash: 3bda7bd1780a254c891515b4f8352ba2
humanhash: double-july-kitten-nuts
File name:New_order_quantity.hxp.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:821'253 bytes
First seen:2020-10-27 10:08:11 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:7h+EbSbDdscmTf1FyBKA6ApWL9aW6NrmuuV1rSzK60kk:7h+Ee/o1oBKdAQpBerOIc
TLSH 260533641BE2B286F9C14D683E65D822025147FFBE69EE381AE9CCDCC58847FC63611D
Reporter abuse_ch
Tags:MassLogger rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: pro236-138.mxout.rediffmailpro.com
Sending IP: 202.137.236.138
From: Nikunj <ho@sundekintl.com>
Subject: Re: Order
Attachment: New_order_quantity.hxp.rar (contains "New order quantity.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/37b9d4020b9d37cce05a757dcc415b09b342e9306deec41c63be46f0b089d725/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-27 07:14:55 UTC
AV detection:
11 of 48 (22.92%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=g645iaqltu34zyc2ov64yqk3bgzuf2jqnxxmihddxzdpbmej24sq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 37b9d4020b9d37cce05a757dcc415b09b342e9306deec41c63be46f0b089d725

(this sample)

MassLogger

Executable exe ca0e3013bce504e1592e553248ce902c00b9ab3cd4cbf5b2bfa9c9577ec10f33

  
Dropping
MD5 9ca40d8cbf635b2874e05b985aa67d55
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ca0e3013bce504e1592e553248ce902c00b9ab3cd4cbf5b2bfa9c9577ec10f33

Comments