MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 468969e2b52f8faef8301f6551091224abd8ce7aa1c3c5af0b2bb153dc867c64. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 468969e2b52f8faef8301f6551091224abd8ce7aa1c3c5af0b2bb153dc867c64
SHA3-384 hash: 5e04e1c83ad3893b50a35149501dc92299af396285555ac39565733b36e3655dd2399104d03c81396b6d44e239307f0c
SHA1 hash: c293a474ffcb6b16a61131cdcbcc1762483ba558
MD5 hash: 6f437657263ceea976dbbe587727424e
humanhash: zulu-tennis-south-magnesium
File name:Hesap Hareketleri.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:799'252 bytes
First seen:2020-10-28 09:05:19 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:vmmidqLA1fzi3DrT3rWUFzjBPO6K1PRvs:vm5d+Ce3D15PqZE
TLSH 2205336F1C08262E94D0EAF4F118E46B846793606F3C3367B3546C28751C698AD7FB2A
Reporter abuse_ch
Tags:GarantiBBVA geo MassLogger rar TUR


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: garantibbva.com.tr
Sending IP: 185.251.118.45
From: Garanti BBVA <garanti@garantibbva.com.tr>
Reply-To: noreply <mintchin1@gmail.com>
Subject: Günlük Hesap Hareketleri Bilgilendirmesi
Attachment: Hesap Hareketleri.rar (contains "gQzz2p9u8f6mdFn.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
104
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/468969e2b52f8faef8301f6551091224abd8ce7aa1c3c5af0b2bb153dc867c64/
Threat name:
Win32.Trojan.Pwsx
Create hunting rule
Status:
Malicious
First seen:
2020-10-28 07:57:24 UTC
AV detection:
2 of 48 (4.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=i2ewtyvvf6h256bqd5svccisesv5rtt2uhb4llylfoyvhxegprsa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 468969e2b52f8faef8301f6551091224abd8ce7aa1c3c5af0b2bb153dc867c64

(this sample)

MassLogger

Executable exe b4c677c568152f925904f613d1361015ea9a07d105874411dc7962f57ebd7412

  
Dropping
MD5 eee72033cbf4035bfdbc52b061a6ac94
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b4c677c568152f925904f613d1361015ea9a07d105874411dc7962f57ebd7412

Comments