MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 51b498cc29faaf1de9b608530c8e0ee0029c333a17326ed5b95ea482d68b6df6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 51b498cc29faaf1de9b608530c8e0ee0029c333a17326ed5b95ea482d68b6df6
SHA3-384 hash: eb65c9ac000da76f27349299f3e756d70c57d09af453c44f6979b84381b76cefa696979a3b90e6d235cb8d620bbbaedb
SHA1 hash: b4c870f783b702e24b1e34e4518cd649f223add3
MD5 hash: f6c08173fb70fa952800f024ce902ef1
humanhash: spaghetti-item-arkansas-april
File name:Our New Order August 17 2020 at 2.99_PVV440_PDF.img
Download: download sample
Signature MassLogger
Create hunting rule
File size:1'245'184 bytes
First seen:2020-08-19 09:18:45 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:/M0Z1C+W5bHGFeeBPuN6sW8D89//3Tt5uP6B5nsTUAnTBYa6ei4pk:E0rjAiBWN6sW8D89//3TPtf25J/iGk
TLSH D54512A263CA6626D13935338371A7058BF587561123C32BF89F139B0F23BFE9951AC5
Reporter abuse_ch
Tags:img MassLogger


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: hosting4.kmtiendas.com
Sending IP: 37.152.93.84
From: Jana Azih <jana.azih@getinge.com>
Subject: RE: AW: Our New Order/Enquiry No.00127
Attachment: Our New Order August 17 2020 at 2.99_PVV440_PDF.img (contains "Our New Order August 17 2020 at 2.99_PVV440_PDF.exe")

MassLogger SMTP exfil server:
mail.copyrap.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/51b498cc29faaf1de9b608530c8e0ee0029c333a17326ed5b95ea482d68b6df6/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-18 23:06:21 UTC
AV detection:
14 of 47 (29.79%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=kg2jrtbj7kxr32nwbbjqzdqo4abjymz2c4zg5vnzl2sifvulnx3a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

img 51b498cc29faaf1de9b608530c8e0ee0029c333a17326ed5b95ea482d68b6df6

(this sample)

MassLogger

Executable exe cce8a02cb6b4a8e601af123a1ec418b1ed77228e3929121f9c3b42eda67b8d17

  
Dropping
MD5 b48cda1ebc473b97956ea5c7621322c2
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 cce8a02cb6b4a8e601af123a1ec418b1ed77228e3929121f9c3b42eda67b8d17

Comments