MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4f514f2f7d2b52360c4382a4beb024e823de099e4afe557e76c533fce0468bde. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4f514f2f7d2b52360c4382a4beb024e823de099e4afe557e76c533fce0468bde
SHA3-384 hash: 8f766d2580d1625d60b229c48f923610b550bfc743cfc5d3e15105bac1b8279b2f4ee5a4cc8cd6b1b495768a65726cb7
SHA1 hash: e6968b27c4cf812b09797915ac4b1c03782176a3
MD5 hash: 8bf4a4b53ef587e10b838e4b0d84df5e
humanhash: four-papa-william-mobile
File name:Hesap Hareketleri.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:807'028 bytes
First seen:2020-10-27 14:30:45 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:2yJ4/lmLqHPL73y8SngSDjkwPJCNKF1tqfNT1:2yJ4/lmLqHPSngejkwP5zYFT1
TLSH 9B053346E4CEAD5C4D65C15B3DD2498D884B81D258E29B2CA2F9426DC2CBB004DFFDE3
Reporter abuse_ch
Tags:Akbank geo MassLogger rar TUR


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: m1mkyc5j.ni.net.tr
Sending IP: 89.252.168.58
From: AKBANK <hizmet@bilgi.akbank.com>
Reply-To: otikafranklin@gmail.com
Subject: Hesap Hareketleri (Ref:1002660807044)
Attachment: Hesap Hareketleri.rar (contains "Hesap Hareketleri.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/4f514f2f7d2b52360c4382a4beb024e823de099e4afe557e76c533fce0468bde/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-10-27 12:34:56 UTC
AV detection:
2 of 48 (4.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=j5iu6l35fnjdmdcdqksl5mbe5ar54cm6jl7fk7twyuz7zycgrppa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/4f514f2f7d2b52360c4382a4beb024e823de099e4afe557e76c533fce0468bde

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 4f514f2f7d2b52360c4382a4beb024e823de099e4afe557e76c533fce0468bde

(this sample)

MassLogger

Executable exe cb00ac9191b829c788bd5c7c17a4125268a9480c77bc3515eaf7ecc468582ab3

  
Dropping
MD5 52cfd323565c8ac2facee1050a693820
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 cb00ac9191b829c788bd5c7c17a4125268a9480c77bc3515eaf7ecc468582ab3

Comments