MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 91f13feab325af4b12aa1ceab808e469127d3bf5c801e28e8b56f4cd9c233cf3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 91f13feab325af4b12aa1ceab808e469127d3bf5c801e28e8b56f4cd9c233cf3
SHA3-384 hash: aeed1537804d3e235fbe0585e4687fdae79b09d7701382d66499ca0dd80828104eb6acf8b9c2a66f2f339b8b100a1c2e
SHA1 hash: 8d13206b33908d73f1b4357d459be69d0bf80f2b
MD5 hash: 2b42c0f9f95eaba5eacc690d7bccefbe
humanhash: sink-kitten-alpha-mountain
File name:SHELTER ARCHITECTURE TECHNOLOGY.gz
Download: download sample
Signature MassLogger
Create hunting rule
File size:540'409 bytes
First seen:2020-11-05 09:44:00 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 12288:0ru9EAFiRDRKCUcw8TAAp7CfnWJdHV21W6Qu80Z:PE40D4roCf4HV2191
TLSH 5DB423423E2A1D069DC7BCFD4B5090B375A19E372C8343DBEB13B594B37AA98E196C05
Reporter abuse_ch
Tags:gz MassLogger


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: slot0.shenzhentoptrade.net
Sending IP: 37.46.150.190
From: aaron@shelter-structures.com
Subject: Installtion drawings & instructions (20SH421-A/20SH422-A/20SH423-A)
Attachment: SHELTER ARCHITECTURE TECHNOLOGY.gz (contains "SHELTER ARCHITECTURE TECHNOLOGY.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/91f13feab325af4b12aa1ceab808e469127d3bf5c801e28e8b56f4cd9c233cf3/
Threat name:
Win32.Infostealer.Maslog
Create hunting rule
Status:
Malicious
First seen:
2020-11-05 07:07:31 UTC
AV detection:
15 of 29 (51.72%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=shyt72vtewxuwevkdtvlqchenejh2o7vzaa6fdulk32m3hbdhtzq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

gz 91f13feab325af4b12aa1ceab808e469127d3bf5c801e28e8b56f4cd9c233cf3

(this sample)

MassLogger

Executable exe c840b9cc10bcbae0e575a43bb9ef69b5cb2ca7c4df9760f155a3ab4d2f689272

  
Dropping
MD5 0fabc5f0913cf98ecc4e3da04c6fe16e
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c840b9cc10bcbae0e575a43bb9ef69b5cb2ca7c4df9760f155a3ab4d2f689272

Comments