MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6b93c7c2c29e7a3b01620260da5182e4d7fae870b65cb2579ac7f935dbcb20f9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6b93c7c2c29e7a3b01620260da5182e4d7fae870b65cb2579ac7f935dbcb20f9
SHA3-384 hash: 33a89c61f7b1403a3b1375650e8d7428a25ceeef832a1416c8e7a843cf0de81f5f17df7941e1e2aed78f782cd24499c3
SHA1 hash: 91bc4dafe570c2b6827666dad8e435dbd11d98b9
MD5 hash: 54e0b475284da6bf40492dfa4cefe216
humanhash: timing-vermont-robert-hamper
File name:Product Inquiry.r01
Download: download sample
Signature MassLogger
Create hunting rule
File size:864'374 bytes
First seen:2020-07-22 10:11:24 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:Xt44NSvCXCVzXnhrU8Nf7UJ/+BajPv33Wpj2mLZtAqRGIX3b3h:XLSvCSVrnhre/Kaj3oj2mLZJRHzh
TLSH 75053310016E0CAE476F83565E8994CC627CFDFABAF25119453F4AA33DB5FB02724DA8
Reporter abuse_ch
Tags:MassLogger r01


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: emailed.site
Sending IP: 185.31.160.5
From: Haruo Bando <info@emailed.site>
Subject: Product Inquiry / Offer
Attachment: Product Inquiry.r01 (contains "Product Inquiry.exe")

MassLogger SMTP exfil server:
smtp.yandex.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
73
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Win32.Herz.B.125.14884.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/6b93c7c2c29e7a3b01620260da5182e4d7fae870b65cb2579ac7f935dbcb20f9/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-22 10:13:05 UTC
AV detection:
21 of 48 (43.75%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=noj4pqwctz5dwalcajqnuumc4tl7v2dqwzolev42y74tlw6led4q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Unknown
Score:
0.26
Link:
https://yomi.yoroi.company/submissions/6b93c7c2c29e7a3b01620260da5182e4d7fae870b65cb2579ac7f935dbcb20f9

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 6b93c7c2c29e7a3b01620260da5182e4d7fae870b65cb2579ac7f935dbcb20f9

(this sample)

MassLogger

Executable exe 52e864374ebb34727b88f278970946520a53383c0b7e85dbbc664b45329616e3

  
Dropping
MD5 2e0754487143853f2791b729f2222146
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 52e864374ebb34727b88f278970946520a53383c0b7e85dbbc664b45329616e3

Comments