MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3d9944fadf6c7c728f797cc56bed01e2c590e767239e04fcd007306e7bf0a419. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3d9944fadf6c7c728f797cc56bed01e2c590e767239e04fcd007306e7bf0a419
SHA3-384 hash: 3a2b5ed6b474b63d82d06c1cc751e85eab2a21c634bd8e7257c130ffff08d1eb2000e15425f24ae8c27b9648e16007fe
SHA1 hash: fc8484f056cfbfd13a8f12749c5eb20018ce1b2a
MD5 hash: c2b2d22d361a86ea2aa8b0effd629005
humanhash: oregon-colorado-mockingbird-salami
File name:Anti Markietng Purchase Order Sheets.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:832'602 bytes
First seen:2020-08-04 13:19:50 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:G/a+TCdg2OuIKlGoe0HDKO4gmt8MF0LG4L2dmUoiRGuq0Q8BlLGAFGuh:QCddOuVlG/YPre8MF0nlD0TPcuh
TLSH D2053353CCDE4FB7A3A4513C9BF646E3A64C80DA979EACDB6CC87204257218216DB74C
Reporter abuse_ch
Tags:MassLogger rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: tnpl.net.in
Sending IP: 156.96.117.156
From: Ravi Parande <ravi.parand@tnpl.net.in>
Subject: Anti Markietng Purchase Order Sheets
Attachment: Anti Markietng Purchase Order Sheets.rar (contains "Anti Markietng Purchase Order Sheets.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/3d9944fadf6c7c728f797cc56bed01e2c590e767239e04fcd007306e7bf0a419/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-04 13:21:08 UTC
AV detection:
18 of 48 (37.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=hwmuj6w7nr6hfd3zptcwx3ib4lczbz3heopaj7gqa4yg467quqmq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/3d9944fadf6c7c728f797cc56bed01e2c590e767239e04fcd007306e7bf0a419

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 3d9944fadf6c7c728f797cc56bed01e2c590e767239e04fcd007306e7bf0a419

(this sample)

MassLogger

Executable exe 3f97dfbae448b3eb28d6f08f666029037d890dc94dbce0e372b4dd2a63fd037f

  
Dropping
MD5 879f8158a062005bd3976a45233f8c69
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3f97dfbae448b3eb28d6f08f666029037d890dc94dbce0e372b4dd2a63fd037f

Comments