MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 944dd4b6c8ca52dad374b30433681424b44c0ba035ca07ea0d73451b5c75dbac. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
MassLogger
Vendor detections: 5
| SHA256 hash: | 944dd4b6c8ca52dad374b30433681424b44c0ba035ca07ea0d73451b5c75dbac |
|---|---|
| SHA3-384 hash: | b3858c11f2c7df96acefe182a9a5e4cba8a9fc470bf61150fe4139023be0b2112087e48aec8088510a7b729d1d984f8e |
| SHA1 hash: | 9a5173f4e3fa34d60bd837966ee389fe42cadb80 |
| MD5 hash: | 17052bada2c3617185ee3e6bb472b099 |
| humanhash: | delaware-lithium-failed-low |
| File name: | dll.bin |
| Download: | download sample |
| Signature | MassLogger |
| File size: | 87'552 bytes |
| First seen: | 2020-10-01 14:53:16 UTC |
| Last seen: | 2020-10-01 15:51:41 UTC |
| File type: |  dll |
| MIME type: | application/x-dosexec |
| imphash | dae02f32a21e03ce65412f6e56942daa (123 x YellowCockatoo, 60 x CobaltStrike, 44 x JanelaRAT) |
| ssdeep | 1536:yvgL0h5THFTDpsBdnt3roBMC1zBe9TtYupy7zPKsjwN2F9tWg0Kcl:egL0h5z9FkxoKCNBenZAaswa+gbY |
| Threatray | 349 similar samples on MalwareBazaar |
| TLSH | EE836B1237864715C92861B688EF092403EAABC73A73DB657E4DA39D1F133E3DE15788 |
| Reporter |  Arkbird_SOLG |
| Tags: | Loader MassLogger |
ArkbirdDevil
DLL loader for extract the ZIP which content masslogger stealer. Used on the Italian campaign by the same TA since end September 2020.Intelligence
File Origin
# of uploads :
2
# of downloads :
110
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Result
Verdict:
Clean
Maliciousness:
Behaviour
Sending a UDP request
Result
Threat name:
Unknown
Detection:
suspicious
Classification:
evad
Score:
22 / 100
Signature
(
)
.
a
b
c
d
E
f
h
i
k
l
m
N
o
p
r
s
T
u
y
Behaviour
Behavior Graph:
Threat name:
Win32.Trojan.Ymacco
Status:
Malicious
First seen:
2020-10-01 14:55:06 UTC
File Type:
PE (.Net Dll)
Extracted files:
4
AV detection:
18 of 29 (62.07%)
Threat level:
5/5
Detection(s):
Malicious file
Verdict:
unknown
Similar samples:
+ 339 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
944dd4b6c8ca52dad374b30433681424b44c0ba035ca07ea0d73451b5c75dbac
MD5 hash:
17052bada2c3617185ee3e6bb472b099
SHA1 hash:
9a5173f4e3fa34d60bd837966ee389fe42cadb80
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
MassLogger
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
f8ea7e1f4e765ebc2b767ee17e9b06bcd0da696eab92e16ef487537a8acbaf73
Dropped by
SHA256 f8ea7e1f4e765ebc2b767ee17e9b06bcd0da696eab92e16ef487537a8acbaf73
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.