MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9f377c8709ba71efaa74d270b7a4c98f44ea62847c66d2e54a1d1044bb8a2577. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9f377c8709ba71efaa74d270b7a4c98f44ea62847c66d2e54a1d1044bb8a2577
SHA3-384 hash: 2dde85d7d1fd122e02db55679d4a7e7caa3e4d79652e2c86112063401e110fc685ef07c9fe75529b77719cdbb3bae848
SHA1 hash: fe26ea68a82668b47ffa09212c18fd21688d5efb
MD5 hash: 1799701f59581e92fee638c2791756e5
humanhash: low-cold-ink-hydrogen
File name:Invoice.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:747'158 bytes
First seen:2020-08-13 05:49:53 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:l4I2Lw4ZjFw8hh/8TAQHG2YqpQbvM9UllwWdsVG6nGcaH5k73jx+cf2SS:l495F9huD0vMzU0GkL4N
TLSH F0F433518E31D2EEA85C0D625AE9611B0097AF6CE473787FA31D358DDD241C3FAC0BA6
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: server.linux108.papaki.gr
Sending IP: 185.138.43.36
From: Eloy Picón <eloypicon@dimarosa.es>
Subject: RE:ORDEN DE COMPRA 28412
Attachment: Invoice.zip (contains "Invoice.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25244.ZipHeur.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.21103.ZipHeur.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9f377c8709ba71efaa74d270b7a4c98f44ea62847c66d2e54a1d1044bb8a2577/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-08-13 05:51:08 UTC
AV detection:
15 of 48 (31.25%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=t43xzbyjxjy67ktu2jylpjgjr5couyueprtnfzkkduiejo4kev3q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Trojan
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/9f377c8709ba71efaa74d270b7a4c98f44ea62847c66d2e54a1d1044bb8a2577

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip 9f377c8709ba71efaa74d270b7a4c98f44ea62847c66d2e54a1d1044bb8a2577

(this sample)

MassLogger

Executable exe 37eb096457c5f3b81945f57de1b46674cdd7ccf83714f0bc4c0d982ade2405bd

  
Dropping
MD5 922902037e92ce7c5297054a629f1ef5
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 37eb096457c5f3b81945f57de1b46674cdd7ccf83714f0bc4c0d982ade2405bd

Comments