MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 94b9e50ce1bb9c5cb5852dbbb91a6ec15db0ae66491a218fccd22b1d334f62d4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 94b9e50ce1bb9c5cb5852dbbb91a6ec15db0ae66491a218fccd22b1d334f62d4
SHA3-384 hash: 2cb7bdc214e65ad397c182b4f19732ddd20ed9c10ecd2dc35881603e32b8cadf99d83787459293c4dc7e61d71f9cd6bf
SHA1 hash: 1322333a5c4529cfc2dcc53e85c5d80ff1aaae54
MD5 hash: eeff7196e13296e5cbdc1459c82a771b
humanhash: hot-oxygen-table-twelve
File name:PRODUCT LIST DATASHEET.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:1'051'105 bytes
First seen:2020-07-06 07:03:14 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:IyDgCc6BKAAbtWgTMzy86pcMCuZSxaHfPprcvEK9dskZV0q/AvrU9E:Iyk56BKAAZWgmy8eCC9Hpry1LnV0jvrL
TLSH 472533D3686602CF751D7BAA0C8BA97793AFC395124BD9C1518FB6C06A4903373CBA53
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: smtp126.ord1d.emailsrvr.com
Sending IP: 184.106.54.126
From: Martin Václavek <sak@sak-loziska.cz>
Reply-To: me <testing@goodfreightthailand.com>
Subject: URGENT ORDER REQUEST
Attachment: PRODUCT LIST DATASHEET.zip (contains "DATASHEET.exe")

MassLogger SMTP exfil server:
mail.mkontakt.az:587

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Generic-EXE.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/94b9e50ce1bb9c5cb5852dbbb91a6ec15db0ae66491a218fccd22b1d334f62d4/
Threat name:
ByteCode-MSIL.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-06 07:05:06 UTC
AV detection:
33 of 48 (68.75%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ss46kdhbxoofznmffw53sgtoyfo3bltgjencdd6m2ivr2m2pmlka._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 94b9e50ce1bb9c5cb5852dbbb91a6ec15db0ae66491a218fccd22b1d334f62d4

(this sample)

MassLogger

Executable exe 97e4b41e30337b05fa008fbb69cbd5f16af2e61067637d1fad45894cfe4c683f

  
Dropping
MD5 cf813727378fb5235cd88bec24f5cc56
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 97e4b41e30337b05fa008fbb69cbd5f16af2e61067637d1fad45894cfe4c683f

Comments