MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5d049eb94dce31be6f4093ef015571d69cc62db1072e49185e0a1f3fd8dd55d4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5d049eb94dce31be6f4093ef015571d69cc62db1072e49185e0a1f3fd8dd55d4
SHA3-384 hash: bddb4d06143187953c317e537a22aca3e14ecb8dce998c2de1cda6ead1646d63826256ef3e1a42a11d18105e7f5d6ae3
SHA1 hash: 53146b4e302596553186bbe7e1c01bd2310a5c03
MD5 hash: 6eb658489c1eb76b38842d671b1f7a32
humanhash: king-nuts-sad-virginia
File name:HarcamaRaporu..rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:646'947 bytes
First seen:2020-10-12 05:53:28 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:Pm+0q4LAqQJpDlJllR+PvOurdIQ7N5DWc5AepCOvfbuLSH3xFFgGmBrbn8e:PmanDlJUfxP5DJpCIbuLk3xFFK9Ie
TLSH 21D423163F33B576B3244B59CEC377B82C48A89EB0FD80D77E80519265A7ABD1ADC442
Reporter abuse_ch
Tags:geo isbank MassLogger rar TUR


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: proje.mertbilisim.net
Sending IP: 85.95.240.168
From: Turkiye Is Bankasi A.S <bilgilendirme@ileti.isbank.com.tr>
Reply-To: noreply <mintchin1@gmail.com>
Subject: İş Bankası-10.10.2020 05:00-11.10.2020 04:59 **29-0174*** Numaralı Vadesiz Hesap - TL Özeti
Attachment: HarcamaRaporu..rar (contains "Ike.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/5d049eb94dce31be6f4093ef015571d69cc62db1072e49185e0a1f3fd8dd55d4/
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=lucj5oknzyy3432aspxqcvlr22ommlnra4xesgc6bipt7wg5kxka._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/5d049eb94dce31be6f4093ef015571d69cc62db1072e49185e0a1f3fd8dd55d4

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 5d049eb94dce31be6f4093ef015571d69cc62db1072e49185e0a1f3fd8dd55d4

(this sample)

MassLogger

Executable exe a2b0e9c1ea03a3a538fe9ef7f8e6dbf4c08feba8560e238e29fce0dd2f2e144b

  
Dropping
MD5 4c1a1e456b88880376ebc5656f631da5
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a2b0e9c1ea03a3a538fe9ef7f8e6dbf4c08feba8560e238e29fce0dd2f2e144b

Comments