MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7a753d911976911e9d9c3ad75f533c8a1a514f9263b4310b76fa2a22d31d8cef. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7a753d911976911e9d9c3ad75f533c8a1a514f9263b4310b76fa2a22d31d8cef
SHA3-384 hash: 7d42b98b5226132a9054877127159339eec66520210d3e7e8cb3dcd360de9348aaa871578bd0c025a1d8c69f7e15d2b7
SHA1 hash: a20ed17be964b77ce6ec48dd2f44a64fb63644a6
MD5 hash: 7e3228d397da396a41017bd4c799c633
humanhash: fifteen-green-lithium-cold
File name:Revised PI .pdf.ace
Download: download sample
Signature MassLogger
Create hunting rule
File size:993'115 bytes
First seen:2020-10-08 13:14:49 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:633jICPkhKwt+uvktTh4QTWUgEnE6RKh4dbfTiyzFVUrrksxQyFZ:uVPcHtTktTC5UjD0yhV+k/0Z
TLSH 782533925EC88819E5077C3BDC36BE52D7A6DA0E392FD4916132248ECF46F5C6E1A433
Reporter abuse_ch
Tags:ace MassLogger


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: addaaninternational.com
Sending IP: 156.96.151.232
From: zaman@addaaninternational.com
Subject: RE: RE: Discounted offers - PR# 2821 PO 23339
Attachment: Revised PI .pdf.ace (contains "Revised PI .pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
90
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7a753d911976911e9d9c3ad75f533c8a1a514f9263b4310b76fa2a22d31d8cef/
Threat name:
Win32.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-10-08 06:56:51 UTC
AV detection:
16 of 48 (33.33%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=pj2t3eizo2ir5hm4hllv6uz4rinfct4smo2dcc3w7ivcfuy5rtxq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Eldorado
Score:
0.90
Link:
https://yomi.yoroi.company/submissions/7a753d911976911e9d9c3ad75f533c8a1a514f9263b4310b76fa2a22d31d8cef

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 7a753d911976911e9d9c3ad75f533c8a1a514f9263b4310b76fa2a22d31d8cef

(this sample)

MassLogger

Executable exe a8a0ccb327ebc5fce7c9a2086cea22103467000ecda8f66b57c4af0b9536e81e

  
Dropping
MD5 9669cdeae595c665e9ee1f7a4196bf3e
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a8a0ccb327ebc5fce7c9a2086cea22103467000ecda8f66b57c4af0b9536e81e

Comments