MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8a30191071b228039a217301f4f3431924d492d01ec49302fa30e5ab9388b81d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8a30191071b228039a217301f4f3431924d492d01ec49302fa30e5ab9388b81d
SHA3-384 hash: ed691920dad7379c4d11b5c7c281d737c8b39de52d8cbb2cca3ab6f446789c270d17edf56ad62056e92ff6cf938b1698
SHA1 hash: f98caff0b8770314c7e3fda81cfa89bd69da43b0
MD5 hash: 12206f55c902e183981e0e43a6d81b36
humanhash: hawaii-mountain-wolfram-edward
File name:PO 202108 FOR JANUARY 2021.lha
Download: download sample
Signature MassLogger
Create hunting rule
File size:1'469'897 bytes
First seen:2020-12-31 07:50:14 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:T3VzDsuuemvDC/sz2b47TuNRw/qB/lZnqKOXPAepGQmn/rBKoJlJgTvpkcAWSfRq:TJsuuBDC62k7YWG/nqjPAepGQzoiWeSM
TLSH 3F653360602A0A53B927521CE5956AD3B094F8224DEF786EF2B34EF9DB17FF704110B9
Reporter abuse_ch
Tags:lha MassLogger


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: mta5.qualitychamicals.com
Sending IP: 176.123.6.235
From: 苏映翔 <terence.so@otlsystems.com>
Subject: PO 202108 FOR JANUARY 2021
Attachment: PO 202108 FOR JANUARY 2021.lha (contains "PO 202108 FOR JANUARY 2021.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
311
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8a30191071b228039a217301f4f3431924d492d01ec49302fa30e5ab9388b81d/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-12-31 07:51:07 UTC
AV detection:
7 of 47 (14.89%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=riybsedrwiuahgrboma7j42ddesnjewqd3cjgax2gds2xe4ixaoq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/8a30191071b228039a217301f4f3431924d492d01ec49302fa30e5ab9388b81d

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 8a30191071b228039a217301f4f3431924d492d01ec49302fa30e5ab9388b81d

(this sample)

MassLogger

Executable exe 828a9fae03e6a20158c58a659f27371fbe9a836199a3327fe5ef457115cf0206

  
Dropping
MD5 d6fedf690e4ea4ba0918f9deddeb9b7a
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 828a9fae03e6a20158c58a659f27371fbe9a836199a3327fe5ef457115cf0206

Comments