MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 487966ac27957cffaab676f739a0928f87a9dab944c275cad3550d3760b42ae2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence 1 File information 4 Yara Comments

SHA256 hash: 487966ac27957cffaab676f739a0928f87a9dab944c275cad3550d3760b42ae2
SHA1 hash: bc55924b3584a7e34e955b9d710f465b4df00297
MD5 hash: 1e57d49e066643e833ca5aa01c1afdf6
File name:Invio Estratto.CAB
Download: download sample
Signature MassLogger
File size:764'735 bytes
First seen:2020-05-22 10:08:31 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:QtDxhA9DMcE+PI1kfUToTY8m8EGB7Euiornelg3by6V+oS+kFI57BWlB:mw9BvMqurhornelg3by6V+oSp25NMB
TLSH D2F433E56E9A20EBBB7805214CD3853A8C675E97C1C3312C35246AE9C93EBDE8F05749
Reporter @abuse_ch
Tags:cab MassLogger


Twitter
@abuse_ch
Malspam distributing MassLogger:

HELO: cloudhost-143971.us-west-1.nxcli.net
Sending IP: 173.249.144.86
From: GLS BARI <bari@gls-italy.com>
Subject: Invio Estratto Conto
Attachment: Invio Estratto.CAB (contains "Invio Estratto.exe")

Intelligence


Mail intelligence
Trap location Impact
Global Low
# of uploads 1
# of downloads 23
Origin country US US
ClamAV SecuriteInfo.com.MSIL.Kryptik.UCB.22051.UNOFFICIAL
VirusTotal:Virustotal results 12.50%

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 487966ac27957cffaab676f739a0928f87a9dab944c275cad3550d3760b42ae2

(this sample)

  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment

Comments