MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8b934d88f39c9d05d2c3f6381cba577dbc1c9ae853521a6e9892536699a75a6f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8b934d88f39c9d05d2c3f6381cba577dbc1c9ae853521a6e9892536699a75a6f
SHA3-384 hash: 3c5092256b20caae2bf2ae9cd1a4d1102361efc9bb0b545335ca17cdad6505fcae6cbf28c3c709b136917c2c476c02e2
SHA1 hash: fe23fd0dc2de9f0c9544019a88d6ba78c2273dd6
MD5 hash: c7c7fdcc327d949ba84261a1030c22e3
humanhash: colorado-georgia-oregon-don
File name:221720FTTI0173 USD10007.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:905'577 bytes
First seen:2020-06-02 11:59:03 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:fblYS5nJhoP+7HBcWKf7Ykt6y9z8/TiVd8Dgpw0FxeVFRD28adpoG5LG31X4mK:f5YunJH7hcJf7/tV9z8/un8hMxel+b
TLSH 541533F63BA0DF8E51923855608EE3C5591BEEF9BFA7E8C92046BA1CD4C18D9C4048D7
Reporter abuse_ch
Tags:MassLogger rar


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: slavesmtp.scs-net.org
Sending IP: 213.178.226.249
From: Ailanco <ailanco@scs-net.org>
Subject: RE: Request for sample BTN , style - MGTD05749A CURV & MGTD05751A CURV
Attachment: 221720FTTI0173 USD10007.rar (contains "221720FTTI0173 USD10007.exe")

MassLogger SMTP exfil server:
smtp.yandex.com:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
65
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Genkryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-02 12:37:22 UTC
File Type:
Binary (Archive)
Extracted files:
1
AV detection:
15 of 48 (31.25%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=roju3chttsoqluwd6y4bzosxpw6bzgxiknjbu3uysjjwngnhljxq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar 8b934d88f39c9d05d2c3f6381cba577dbc1c9ae853521a6e9892536699a75a6f

(this sample)

MassLogger

Executable exe 29f20793c95925c35611390902e709a7e12562afe8b3c7298c911e5dd9871526

  
Dropping
MD5 923c81b745c3745cc21925c57b3ffcca
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 29f20793c95925c35611390902e709a7e12562afe8b3c7298c911e5dd9871526

Comments