MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ab16c5b854d81ef1adb1b5156a598b021bce1e459df07c46436e532bbf9f6cd0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ab16c5b854d81ef1adb1b5156a598b021bce1e459df07c46436e532bbf9f6cd0
SHA3-384 hash: e9717a54b9f0356b6cac1cfa13e9dfb7f80fd282c68a1bd4246fb7fdd9aff0514fcb87effa6646ad2b161ff678b026bb
SHA1 hash: 6b001d75be5ed06715608888151c4c465201a196
MD5 hash: 68454ad21cc3340f5ae9817e29a80111
humanhash: oklahoma-apart-tango-sixteen
File name:Order List.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:768'994 bytes
First seen:2020-10-05 11:23:10 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:7Md2vlqCoME5waXpqSpd6qWFiOMUX46bhC5oE+oay1WhqtBcuksoV+PQKzgqmuEu:9lqBBDXpxm6UX4gCOE+1y1WhJukNWKY7
TLSH A9F433BAE82256D397235EDC8CF4BF9D806A7A05132C7E3E442E4E1DFB1299243935D1
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: qq.com
Sending IP: 183.3.255.187
From: 沈晓英 <lisa@dyxuanyi.com>
Subject: Order List
Attachment: Order List.zip (contains "Order List.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
82
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ab16c5b854d81ef1adb1b5156a598b021bce1e459df07c46436e532bbf9f6cd0/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-10-05 11:01:37 UTC
AV detection:
4 of 48 (8.33%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=vmlmlocu3appdlnrwukwuwmlain44hsftxyhyrsdnzjsxp47ntia._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
MassLogger
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/ab16c5b854d81ef1adb1b5156a598b021bce1e459df07c46436e532bbf9f6cd0

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip ab16c5b854d81ef1adb1b5156a598b021bce1e459df07c46436e532bbf9f6cd0

(this sample)

MassLogger

Executable exe 2bd548e22cf519ee21eb5492713555537bbc71c899d2421e8a40d4e81f6b3f65

  
Dropping
MD5 5f69c32ad5d9a724ab741bbbe7bf36bb
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2bd548e22cf519ee21eb5492713555537bbc71c899d2421e8a40d4e81f6b3f65

Comments