MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3c5b2c7a613066dc104de705f371649be9587234ed3ef67ce1cb7a2b8515de04. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3c5b2c7a613066dc104de705f371649be9587234ed3ef67ce1cb7a2b8515de04
SHA3-384 hash: 1698ad52cab3b1a9ea33810bb88907d1baef73b8df2b3c13d1665f743833fcd3573790b1a112db1795b6190a8acb8357
SHA1 hash: 802ad2856d9687a5a105b95f220d3e1a5fe79482
MD5 hash: 0a11fb054457b40d851f01ace3c07937
humanhash: ten-seven-pennsylvania-delaware
File name:RFQ.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:882'968 bytes
First seen:2020-10-09 09:08:37 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:Z/01zicMN3vRdLrP59EhE2vT8OgJDKtsCbAu:ZZhNbPP592E2r8O8+vUu
TLSH E315330A63057DCBCBDBB7CB6D61652D9113ADD238CB5EF4E885A14CF36122B5861C28
Reporter abuse_ch
Tags:MassLogger rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: akhaten.nordnet.ws
Sending IP: 144.76.106.247
From: Gaurav Bothra <offices@catalog-shopper.com>
Reply-To: <avx.shelby@gmail.com>
Subject: Котхари Упит / РФК
Attachment: RFQ.rar (contains "RFQ.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
102
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/3c5b2c7a613066dc104de705f371649be9587234ed3ef67ce1cb7a2b8515de04/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-10-09 07:49:26 UTC
AV detection:
4 of 48 (8.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=hrnsy6tbgbtnyecn44c7g4letpuvq4ru5u7pm7hbzn5cxbiv3yca._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/3c5b2c7a613066dc104de705f371649be9587234ed3ef67ce1cb7a2b8515de04

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 3c5b2c7a613066dc104de705f371649be9587234ed3ef67ce1cb7a2b8515de04

(this sample)

MassLogger

Executable exe 2d9767641256c44bceb6d6c684e76d72245750d1174408ef34e5d35185d4cadb

  
Dropping
MD5 e483f3e062560f3bfc1e1b6bf258af69
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2d9767641256c44bceb6d6c684e76d72245750d1174408ef34e5d35185d4cadb

Comments