MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6d0b8a0c8455d6d8f0332583070806971c2616aaa79d02376e4e7f62afb6a8f9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6d0b8a0c8455d6d8f0332583070806971c2616aaa79d02376e4e7f62afb6a8f9
SHA3-384 hash: 3215aec69c39643e48f7ea6a83bbed10053346d3a8b2c144897e6d37bba77dd4ad0915d976d07b07ffc605cbae9cbe0e
SHA1 hash: 3ab83a8f660ec1e3b442238945b2343973ce96ca
MD5 hash: 821af6f713469f7f0ccc63403a1058c9
humanhash: enemy-xray-michigan-lake
File name:skm-c558899007785432.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:875'402 bytes
First seen:2020-10-14 16:27:49 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:+hcf0RexdppQ7Li1/YTiARtO6X/dSwzejXif1W0DxkvmLntz2FRNXzXebl2CBNgQ:5sRKNA4/Yu8SwS01BDxk+LtgFzW2yft
TLSH 6A15332A782491C143E661F3FF5084A85AEB7CD4110FCA7D94A7608879BD67CBE4E339
Reporter abuse_ch
Tags:MassLogger rar


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: okchem.com
Sending IP: 156.96.47.18
From: jenny<jenny@gentlebeautycn.com>
Subject: Re:payment
Attachment: skm-c558899007785432.rar (contains "skm-c558899007785432.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Heur.10752.31059.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/6d0b8a0c8455d6d8f0332583070806971c2616aaa79d02376e4e7f62afb6a8f9/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-10-14 13:41:17 UTC
AV detection:
8 of 48 (16.67%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=nufyudeekxlnr4btewbqocags4ocmfvku6oqen3ojz7wfl5wvd4q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/6d0b8a0c8455d6d8f0332583070806971c2616aaa79d02376e4e7f62afb6a8f9

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 6d0b8a0c8455d6d8f0332583070806971c2616aaa79d02376e4e7f62afb6a8f9

(this sample)

MassLogger

Executable exe 3f79b9e8017267d47794c922c39008f47100509946ca83844bead7432a091d23

  
Dropping
MD5 c36cf5d1221a81e978c73b69c8a2c878
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3f79b9e8017267d47794c922c39008f47100509946ca83844bead7432a091d23

Comments