MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5ce3b3f2382f3f9b0f9739c0127013f43a0e6c8932d93efc399b110ada83435e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5ce3b3f2382f3f9b0f9739c0127013f43a0e6c8932d93efc399b110ada83435e
SHA3-384 hash: 0a014adead155d51abc725f35fc0b6e8047b7621567be35380b337385d27a6da446a8068ab21f568d62a6cfced055fb4
SHA1 hash: bd7dce9eff6639652e0fa733db944644565e6017
MD5 hash: 91ca29b1cfef02274550f04afac9e051
humanhash: fourteen-two-wisconsin-yellow
File name:New order designs & invoice.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:917'551 bytes
First seen:2020-10-16 13:40:48 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:nzHkvHVESHnR1yCUQ/a/j6pX3ZzZN+k6TnWWpt23ZRU3u2R09eTraPIrgR7JATxF:nzoHnNUbwZN+xT3pt23ZclTr6uq1xxa
TLSH ED1533F4AA6F9E496D51C6F236282086A57CD69219D599E3C4C8DADC2CD3F0D77E0033
Reporter abuse_ch
Tags:MassLogger rar


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: s111-ir-cpanel-trade.maindns.net
Sending IP: 185.165.116.18
From: Kamrul Salami <info.pgpaper@gmail.com>
Reply-To: info@pgpaper.com
Subject: Re:New Order Designs & Specs!!!
Attachment: New order designs & invoice.rar (contains "NEW738_P7382.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5ce3b3f2382f3f9b0f9739c0127013f43a0e6c8932d93efc399b110ada83435e/
Threat name:
ByteCode-MSIL.Trojan.Ymacco
Create hunting rule
Status:
Malicious
First seen:
2020-10-16 12:00:07 UTC
AV detection:
13 of 29 (44.83%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ltr3h4ryf47zwd4xhhabe4at6q5a43ejglmt57bztmiqvwudinpa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/5ce3b3f2382f3f9b0f9739c0127013f43a0e6c8932d93efc399b110ada83435e

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 5ce3b3f2382f3f9b0f9739c0127013f43a0e6c8932d93efc399b110ada83435e

(this sample)

MassLogger

Executable exe b71afd9d9ddfed028e4235476c6392f1a6d2bbee4c4263c61afcbb1ba1a2b2c5

  
Dropping
MD5 6b7fcdeacf68a10513d4ccd01977a219
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b71afd9d9ddfed028e4235476c6392f1a6d2bbee4c4263c61afcbb1ba1a2b2c5

Comments