MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 941b272623b94394946f5bd11324828a0717a0427921c70bcd4f8d5b5c52deaf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 941b272623b94394946f5bd11324828a0717a0427921c70bcd4f8d5b5c52deaf
SHA3-384 hash: a75594ba0181ee7d1b42b0a6c63fb2d434cb5a10bd2500513a6bd937421858525d97602ae478aa489a1b306f67628512
SHA1 hash: 53320746cba926fbd9924f8ff2430b8b40c4ab45
MD5 hash: 19842e7ff569fd1f5d0d787c6fa94393
humanhash: seventeen-foxtrot-iowa-comet
File name:FV00620224400 009384766589.gz
Download: download sample
Signature MassLogger
Create hunting rule
File size:701'190 bytes
First seen:2020-10-19 10:22:20 UTC
Last seen:Never
File type: gz
MIME type:application/gzip
ssdeep 12288:899wtyL+y1IzYiHhQXNWw+aoYDa7FDyKVI1+kTrhstlj/bpJp0DnFlbl092z:ESy1IzYiIgw+8Myk07XhstJbp30hdmM
TLSH 58E423F8499EB3CC903D63D8BD522D6341160DFC4D73BED2AA531217AA9AA2371311DD
Reporter abuse_ch
Tags:gz MassLogger


Avatar
abuse_ch
Malspam distributing MassLogger:

From: Acc Dept Alex <167marketcentersrl@libero.it>
Subject: copia del pagamento
Attachment: FV00620224400 009384766589.gz (contains "FV00620224400 009384766589.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
74
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Heur.25719.21810.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/941b272623b94394946f5bd11324828a0717a0427921c70bcd4f8d5b5c52deaf/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-10-19 10:24:04 UTC
AV detection:
7 of 48 (14.58%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=sqnsojrdxfbzjfdplpirgjecridrpiccpeq4oc6nj6gvwxcs32xq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/941b272623b94394946f5bd11324828a0717a0427921c70bcd4f8d5b5c52deaf

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

gz 941b272623b94394946f5bd11324828a0717a0427921c70bcd4f8d5b5c52deaf

(this sample)

MassLogger

Executable exe f94d7839e0a58e3c070f7c8d5a08558d10447c950388c9398fbb56917b4dc855

  
Dropping
MD5 98ede8e1f7e6ba521a91c15847c23652
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f94d7839e0a58e3c070f7c8d5a08558d10447c950388c9398fbb56917b4dc855

Comments