MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6aae274097a146f2e0b8f3a05b281a69117b126c614ac632733f42167e3e366c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6aae274097a146f2e0b8f3a05b281a69117b126c614ac632733f42167e3e366c
SHA3-384 hash: 7cbe6381312295eb3b5ba60c096548bf6cef23f23a27a3efbb4c41cc231d06c84f70efa40890be3f4f715ed482379330
SHA1 hash: 43b0e036efc957260586870c640ece796be754ae
MD5 hash: 5c774f83ecc757839bb9b555a7f1c46c
humanhash: carolina-asparagus-snake-alanine
File name:QA103 SWIFT.pdf.7z
Download: download sample
Signature MassLogger
Create hunting rule
File size:11'352 bytes
First seen:2020-10-08 05:40:47 UTC
Last seen:2020-10-08 11:12:59 UTC
File type: 7z
MIME type:application/x-rar
ssdeep 192:K3ex6O15cuuNyTwMp1O8w6Lx6Ce8dDYuGYM79Emvpj0cQiyn+uzJjuqtnffjbWn4:5lzOylp1jACX879EOpj0liivBuUnffj1
TLSH CD32A0DB93E3D8804923202A7B5A5D8911A7C9059F382A3EBBD7FE71421F82731C5D92
Reporter abuse_ch
Tags:7z geo GRC MassLogger


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: mail.zedcloud.ro
Sending IP: 188.215.37.226
From: info@sedo.co.uk
Subject: Κορυφαίο επείγον // Συμβουλές πληρωμής - Ref: HSBC99002992 / 1602020
Attachment: QA103 SWIFT.pdf.7z (contains "QA103 SWIFT.pdf.exe")

Intelligence

File Origin
# of uploads :
3
# of downloads :
106
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/6aae274097a146f2e0b8f3a05b281a69117b126c614ac632733f42167e3e366c/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-08 05:42:10 UTC
File Type:
Binary (Archive)
Extracted files:
3
AV detection:
4 of 47 (8.51%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=nkxcoqexufdpfyfy6oqfwka2neixwetmmffmmmtth5bbm7r6gzwa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/6aae274097a146f2e0b8f3a05b281a69117b126c614ac632733f42167e3e366c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

7z 6aae274097a146f2e0b8f3a05b281a69117b126c614ac632733f42167e3e366c

(this sample)

MassLogger

Executable exe 5ba4d89aa8ee0209d0f91d406ff67bf77ff78b4639264c1248cb2eb25bde1c32

  
Dropping
MD5 2ca30d0caf4d8406ca511033f24ef46a
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 5ba4d89aa8ee0209d0f91d406ff67bf77ff78b4639264c1248cb2eb25bde1c32

Comments