MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8566013b21448ffd04a6e33fd182abdc67c7390417138e6fafd4d1a991a9f690. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8566013b21448ffd04a6e33fd182abdc67c7390417138e6fafd4d1a991a9f690
SHA3-384 hash: 424d4ddfc19ba2e9557c47626bca3d92cff1ffa1873668c4d9562cb06643346375020357b2bc097ece42a3f0d495d75f
SHA1 hash: 17a122d6b48322138ffab3ee69475f32128ad24d
MD5 hash: fd3146643665d569b4781ea76d7ea80b
humanhash: solar-harry-leopard-high
File name:LP40728194004.cab
Download: download sample
Signature MassLogger
Create hunting rule
File size:833'992 bytes
First seen:2020-08-07 13:23:19 UTC
Last seen:Never
File type: cab
MIME type:application/vnd.ms-cab-compressed
ssdeep 24576:ztogZxigjF46D/Ubg5u3FHzfZ7q4J2aE4Oe:ztHxLWbg5IZzfRq1AOe
TLSH 5105338FBD20562584D58C27BE1EF7EC070446A89919AE7F511BE7C084DBFD61B2AF08
Reporter abuse_ch
Tags:cab MassLogger


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: nslsugars.com
Sending IP: 185.222.57.136
From: enquiryjaymahesh@nslsugars.com
Subject: URGENT ENQUIRY
Attachment: LP40728194004.cab (contains "LP40728194004.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Variant.Zusy.310751.14054.21286.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8566013b21448ffd04a6e33fd182abdc67c7390417138e6fafd4d1a991a9f690/
Threat name:
Win32.Backdoor.Androm
Create hunting rule
Status:
Malicious
First seen:
2020-08-07 13:25:06 UTC
AV detection:
22 of 29 (75.86%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=qvtacozbish72bfg4m75davl3rt4ooiec4jy435p2ti2tenj62ia._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/8566013b21448ffd04a6e33fd182abdc67c7390417138e6fafd4d1a991a9f690

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

cab 8566013b21448ffd04a6e33fd182abdc67c7390417138e6fafd4d1a991a9f690

(this sample)

MassLogger

Executable exe 3d0af7312beff6b913ae04b6c6b3f9aac323308a1933952d1c8bd732fdf290ce

  
Dropping
MD5 81297e7d0a24d0566bf47c8bebd0a3e2
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3d0af7312beff6b913ae04b6c6b3f9aac323308a1933952d1c8bd732fdf290ce

Comments