MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 99d55ebeea7a36f5c9549b16ee65675a327edb4c2e43833f3a94a2fd6d200f39. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 99d55ebeea7a36f5c9549b16ee65675a327edb4c2e43833f3a94a2fd6d200f39
SHA3-384 hash: e9f8f3fb57ac5c8bccd73f618e3329867817f6c98609a9ad0cb1439cc692a2e4001b4c7bf85596687cfe0e46d43e2531
SHA1 hash: 26293d0793840489a4c00a30da107557c9de4a95
MD5 hash: c5dc77fff04ead65e4bb9d2da72c5e92
humanhash: zulu-oranges-artist-mike
File name:Shipping Doc 3454.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:850'821 bytes
First seen:2020-10-17 06:33:52 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:2RSPGmD0AYTGgoSAvh6TE8syM3j74NpPVFZDa1HqgZpdifX:2RmGmD0AmGgoTwjQj74LNFB4HqEPiP
TLSH 2D0533FD616F1AE3D4312A1EFA9177348FE8209ED999BB45B3459001E7C8693098F1F2
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: cgi.centirn.net
Sending IP: 68.183.61.5
From: Aamir Shiwani <info@centirn.net>
Subject: BL Draft
Attachment: Shipping Doc 3454.zip (contains "Shipping Doc 3454.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.44093020.23283.14805.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/99d55ebeea7a36f5c9549b16ee65675a327edb4c2e43833f3a94a2fd6d200f39/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-10-16 20:04:47 UTC
AV detection:
30 of 48 (62.50%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=thkv5pxkpi3plskutmlo4zlhlizh5w2mfzbygpz2ssrp23jab44q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/99d55ebeea7a36f5c9549b16ee65675a327edb4c2e43833f3a94a2fd6d200f39

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 99d55ebeea7a36f5c9549b16ee65675a327edb4c2e43833f3a94a2fd6d200f39

(this sample)

MassLogger

Executable exe 4b174227ea49d30f3378e8469d9849015779d6d3da73333ad0b386411bfade20

  
Dropping
MD5 ff65414919a5ca429bd872a4f5ae696a
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4b174227ea49d30f3378e8469d9849015779d6d3da73333ad0b386411bfade20

Comments