MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 87723ef44cef3501ff5871305f3fce6a17bec31e09a045ee5f7760308fd7a968. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 87723ef44cef3501ff5871305f3fce6a17bec31e09a045ee5f7760308fd7a968
SHA3-384 hash: e1be1b07f4e4e0d6cbe83853db8af569dd676185ea4c06caddc1c817f21aba2fa68c60879c1477b7bed24dea165458a3
SHA1 hash: 1b2d82f7dd0a65e0aacdc7e4bcee876bca375c4b
MD5 hash: f3b684d43fec3ff1b7945ca815e73da6
humanhash: oscar-carpet-lamp-triple
File name:Order 01001O02.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:112'427 bytes
First seen:2020-10-07 16:43:25 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 3072:fM2SxNh9cP2omJTuMyucU8kniorG7oT45:fLSfomJlWeSA45
TLSH 54B312914598F1FBE252D7825DD4832ED28B3C14DABA7CE29DA07333CE0C87AB646491
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: mx.greentelekom.com
Sending IP: 178.211.39.11
From: <huseyin@eraycephe.com>
Subject: Order 01001O02
Attachment: Order 01001O02.zip (contains "Order 01001O02.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
111
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/87723ef44cef3501ff5871305f3fce6a17bec31e09a045ee5f7760308fd7a968/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-07 15:49:38 UTC
AV detection:
10 of 48 (20.83%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=q5zd55cm542qd72yoeyf6p6onil35qy6bgqel3s7o5qdbd6xvfua._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
0.97
Link:
https://yomi.yoroi.company/submissions/87723ef44cef3501ff5871305f3fce6a17bec31e09a045ee5f7760308fd7a968

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 87723ef44cef3501ff5871305f3fce6a17bec31e09a045ee5f7760308fd7a968

(this sample)

MassLogger

Executable exe 5404deeed73ea0f64dfaaeb7fa4cca1dbae0f6840c5c8634198531c4da44688a

  
Dropping
MD5 53d4c80e6bab76d84c38a48236e81ce7
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 5404deeed73ea0f64dfaaeb7fa4cca1dbae0f6840c5c8634198531c4da44688a

Comments