MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8847ac1680030bbf54afbda6f552c4bdef8b66a510c0de95d845364270edf46a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8847ac1680030bbf54afbda6f552c4bdef8b66a510c0de95d845364270edf46a
SHA3-384 hash: 1f5b1aa6bd227377c9d0195a1d765cb1b87e5532ce1b374e6d5b81ddc8bfc09b4158990bbacaa6f015f449789b85b6f1
SHA1 hash: 4715ae0de8b1b2209983180eb4b90600b7db531c
MD5 hash: 710688e1ed08764506c51bfc2550dd40
humanhash: fanta-emma-eighteen-vegan
File name:4-5114-HT.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:806'463 bytes
First seen:2020-06-15 13:36:42 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:owyzzeXjJ603jXoKKpSJ8XQYytifIRbVhi:rez+603b9JiQYyyIRni
TLSH B305239682633E121E4E10E9DB785C4AB9F2B1EF74F5D6F8C030B76C520EA545128DAF
Reporter abuse_ch
Tags:MassLogger rar


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: server.idealtech.com.my
Sending IP: 43.252.212.240
From: Carroll Adams <webmaster@idealtech.com.my>
Subject: Inquiry 4-5114-HT -------- ASFA
Attachment: 4-5114-HT.rar (contains "4-5114-HT.exe")

MassLogger SMTP exfil server:
mail.privateemail.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-15 13:38:05 UTC
AV detection:
16 of 31 (51.61%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=rbd2yfuaamf36vfpxwtpkuwexxxywzvfcdan5foyiu3ee4hn6rva._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 8847ac1680030bbf54afbda6f552c4bdef8b66a510c0de95d845364270edf46a

(this sample)

MassLogger

Executable exe 81ae80d0dc7e949cd78a6b555c1b08ebd8ec89ecf9847f3d1c0d9790b11be355

  
Dropping
MD5 c8afbe0ba63c3dcde9c7c05b2e344951
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 81ae80d0dc7e949cd78a6b555c1b08ebd8ec89ecf9847f3d1c0d9790b11be355

Comments