MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b3daeb7d62a01ac9787f2c702b1e7fbdbdd8d9a386f3c192bf91a277adc020bc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b3daeb7d62a01ac9787f2c702b1e7fbdbdd8d9a386f3c192bf91a277adc020bc
SHA3-384 hash: 5fbb9f2f7c30522c290ee9c6c8d71093f9263995873f3b0e81966f7b2667bac9f7a4777bbd22614079ff0f23ceef3861
SHA1 hash: 26d1f25f6eb932502cf1b41a567c8b200476ec37
MD5 hash: 605799b639c55aeefa38846a753fa203
humanhash: video-paris-echo-artist
File name:Contract 12532019.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:866'694 bytes
First seen:2020-10-22 07:07:00 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:/LAcMPdsSQ7068RVysFKqwqqGkINOWTlBIwyGLWTjcZR:0cKsSE0jDysF4qqGJcW5mwZW3cZR
TLSH C10533E48A4231ACE3499971B436A7CF97BF437CA106FAD361DFBB5C06AF5C98082451
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: bashan.com.tr
Sending IP: 103.114.106.7
From: ORHAN <hande.us@bashan.com.tr>
Subject: BASHAN - ADIYAT MARKETING - Contract No : 1253/2019 - >First shipment - MAERSK
Attachment: Contract 12532019.zip (contains "Contract No 12532019.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b3daeb7d62a01ac9787f2c702b1e7fbdbdd8d9a386f3c192bf91a277adc020bc/
Threat name:
ByteCode-MSIL.Spyware.Noon
Create hunting rule
Status:
Malicious
First seen:
2020-10-22 05:57:22 UTC
AV detection:
22 of 29 (75.86%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=wpnow7lcuanms6d7frycwht7xw65rwndq3z4dev7sgrhploaec6a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip b3daeb7d62a01ac9787f2c702b1e7fbdbdd8d9a386f3c192bf91a277adc020bc

(this sample)

MassLogger

Executable exe 573b66612f43bd09c655707f60f7a54be3afad50a7de1bd831e26edf3359b069

  
Dropping
MD5 bc3612c3da850921b8d6aa49aad594e6
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 573b66612f43bd09c655707f60f7a54be3afad50a7de1bd831e26edf3359b069

Comments