MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 688a9da779431fa2ae864ace6d8fa62ffc14c67fc8f36f30d03f0bf66a4c2404. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 688a9da779431fa2ae864ace6d8fa62ffc14c67fc8f36f30d03f0bf66a4c2404
SHA3-384 hash: 9965bb26df44f8b615f8ebd99fbec405d1ac4544115a72e2ea849ad4277e2575cb664972b69eb1c113d464497df3a5a6
SHA1 hash: 2d3c19fe75dde59a60cd79bc433b264ba7c91995
MD5 hash: 4515c5e6bfd231d0337bb8c15f4b460c
humanhash: hotel-sink-double-berlin
File name:FV00620224400 009384766589.r15
Download: download sample
Signature MassLogger
Create hunting rule
File size:691'774 bytes
First seen:2020-10-16 13:01:42 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:YqRBOcrNMGHaetFvFu9IsiTzpexDHEdUMJegwTInINWrJMETLYhKcK:YirrNM4+9UWk1ewIIJMWL6M
TLSH 5FE433A97C8C40B5D38B53B32FC42E9714C3C56651CEBAA3B3F89C257F809AD5854A2C
Reporter abuse_ch
Tags:DHL MassLogger r15


Avatar
abuse_ch
Malspam distributing MassLogger:

From: DHL EXPRESS <maria_dhl@gmail.com>
Subject: DHL Failed Delivery Notification
Attachment: FV00620224400 009384766589.r15 (contains "FV00620224400 009384766589.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/688a9da779431fa2ae864ace6d8fa62ffc14c67fc8f36f30d03f0bf66a4c2404/
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ncfj3j3zimp2flugjlhg3d5gf76bjrt7zdzw6mgqh4f7m2smeqca._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/688a9da779431fa2ae864ace6d8fa62ffc14c67fc8f36f30d03f0bf66a4c2404

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 688a9da779431fa2ae864ace6d8fa62ffc14c67fc8f36f30d03f0bf66a4c2404

(this sample)

MassLogger

Executable exe 19d2886d97bf7362c767b77c7a9dec1cdf71c7606a3ceb035fe25e8b8bebddef

  
Dropping
MD5 d39b7c47ede8e998ff27f37387a3e026
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 19d2886d97bf7362c767b77c7a9dec1cdf71c7606a3ceb035fe25e8b8bebddef

Comments