MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8164214bb06a1f001243d97feccbf254997e01f3f443595cfd729e9571a488e4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8164214bb06a1f001243d97feccbf254997e01f3f443595cfd729e9571a488e4
SHA3-384 hash: 22919490d4a19a3529e94459e88abf48ea1bffb7c4313dc310e954e7fb3b298adfab36d6fc41cb3ba51f7579646a8512
SHA1 hash: 42621d8f4d858e10f961470102ae7426d2a36349
MD5 hash: 122b694f6c1371f235b5950b1283d0ba
humanhash: florida-lamp-oregon-eleven
File name:Bank_Details.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:525'522 bytes
First seen:2020-10-12 06:22:30 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:FlsGUFJJjiuh0Dz5jVP7GNCtnj5c9KVuQmbG:FD4iuh0DVjVP6NwMkmK
TLSH 86B423C939E38D5DFC0A540AD7F08B09A256D64074EBA149D1432DFCF7A7AB1E72A708
Reporter abuse_ch
Tags:MassLogger rar


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: saintservices.us
Sending IP: 188.225.11.245
From: Sales Manager <sales@saintservices.us>
Subject: Nov Order / Bank Details
Attachment: Bank_Details.rar (contains "Bank_Details.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8164214bb06a1f001243d97feccbf254997e01f3f443595cfd729e9571a488e4/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-12 03:20:49 UTC
AV detection:
15 of 29 (51.72%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=qfsccs5qnipqaesd3f76zs7sksmx4apt6rbvsxh5okpjk4nerdsa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/8164214bb06a1f001243d97feccbf254997e01f3f443595cfd729e9571a488e4

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 8164214bb06a1f001243d97feccbf254997e01f3f443595cfd729e9571a488e4

(this sample)

MassLogger

Executable exe 52610d8b6b7199cca5c5bb423edc65f316e8ab960774aa7348490899c125bcaf

  
Dropping
MD5 0b337a80a190e332745cd9d3a22db61d
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 52610d8b6b7199cca5c5bb423edc65f316e8ab960774aa7348490899c125bcaf

Comments