MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7ed21bd23f0b32ed18b3f9fe2f4d6c1799ab7e88de54e63a60cca0685492689d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7ed21bd23f0b32ed18b3f9fe2f4d6c1799ab7e88de54e63a60cca0685492689d
SHA3-384 hash: 2dbb552bd13d1ab2049d2bf869c45242fb9358e26c0557f6735bd08bbee4d4e5c5b47982ba7c801a69fd8b4e5ce4481f
SHA1 hash: 31a1643371c598cd97a0b44977f2dc1596475157
MD5 hash: 67401e9373fc08a0dd82cbd68927993c
humanhash: missouri-quebec-montana-grey
File name:Halkbank_Ekstre_20201007_073608_299078.r00
Download: download sample
Signature MassLogger
Create hunting rule
File size:857'731 bytes
First seen:2020-10-07 12:15:22 UTC
Last seen:Never
File type: r00
MIME type:application/x-rar
ssdeep 24576:g0b1Ue4678X2T9KYtR2q2SDQ6ZQIjpKZ9re1J:ZpUZFYKq2wAZ9aJ
TLSH 980523C418B02E98272BE987E78BE8A01C61ED90D8FD65F05CE0D2A357985D37FBD485
Reporter abuse_ch
Tags:geo Halkbank MassLogger r00 TUR


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: halkbank.com.tr
Sending IP: 156.96.62.59
From: HALKBANK.E-EKSTRE@halkbank.com.tr
Subject: T.HALK BANKASI A.Ş. 06.10.2020 Hesap Ekstresi
Attachment: Halkbank_Ekstre_20201007_073608_299078.r00 (contains "Halkbank_Ekstre_20201007_073608_299078.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
100
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7ed21bd23f0b32ed18b3f9fe2f4d6c1799ab7e88de54e63a60cca0685492689d/
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=p3jbxur7bmzo2gft7h7c6tlmc6m2w7ui3zkomotazsqgqvesncoq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/7ed21bd23f0b32ed18b3f9fe2f4d6c1799ab7e88de54e63a60cca0685492689d

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

r00 7ed21bd23f0b32ed18b3f9fe2f4d6c1799ab7e88de54e63a60cca0685492689d

(this sample)

MassLogger

Executable exe 8b1e278db9ecbeda3510a251e207576256e5cfe3171becac7c8b5758f2ca3a9a

  
Dropping
MD5 0051ad4321df053ef5ff93c909a92ad9
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8b1e278db9ecbeda3510a251e207576256e5cfe3171becac7c8b5758f2ca3a9a

Comments