MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7a4233911c53370fdc7171260f75ae2c2b74a0dee94790b357c4c877d4286963. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7a4233911c53370fdc7171260f75ae2c2b74a0dee94790b357c4c877d4286963
SHA3-384 hash: 0ed563b686a7fb612ef4414ea1cd3b74400fda61cde43075ef0574d0fe304ccdd5375ef1420787702078dab3cdc4dda5
SHA1 hash: 9649057db3dda1f409150959a46de49737804995
MD5 hash: f151ae339462f1877b99fb5b11b95621
humanhash: victor-alanine-paris-ten
File name:PO 7032 Magnum_tech.lzh
Download: download sample
Signature MassLogger
Create hunting rule
File size:537'674 bytes
First seen:2020-10-23 06:55:36 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:LbUwBQf7VusFEIu/5UHJXkXHox9jev7BaP88J1t:LoMKufUpXkXHox1ev78P88Ht
TLSH 22B423A998A537C5610E6B5B1B6DEB94C1F8E277B2B8CD10610F182F00E0B5B674E1DF
Reporter abuse_ch
Tags:lzh MassLogger


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: host625319.localhost
Sending IP: 23.160.193.119
From: Mahmoud sarouk|Magnum Trading|Sales assistant<anonymousfox-zekoy@magicmetalsca.com>
Subject: Re: November supply for Magum tech trading PO_3286
Attachment: PO 7032 Magnum_tech.lzh (contains "PO 7032 Magnum_tech.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7a4233911c53370fdc7171260f75ae2c2b74a0dee94790b357c4c877d4286963/
Threat name:
ByteCode-MSIL.Infostealer.Stelega
Create hunting rule
Status:
Malicious
First seen:
2020-10-23 05:07:49 UTC
AV detection:
14 of 29 (48.28%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=pjbdhei4km3q7xdroeta65nofqvxjig65fdzbm2xytehpvbinfrq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 7a4233911c53370fdc7171260f75ae2c2b74a0dee94790b357c4c877d4286963

(this sample)

MassLogger

Executable exe 0edc20539956868004d0f58330a505e0ceb2584e54720b18fb48cb69c43d2378

  
Dropping
MD5 d12371bf162f97702e9595afe1efa591
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 0edc20539956868004d0f58330a505e0ceb2584e54720b18fb48cb69c43d2378

Comments