MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b3efc3524b8db0b1f4d10f9109c1da1730fa3682569b001f69bfb55bf46a6bf0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b3efc3524b8db0b1f4d10f9109c1da1730fa3682569b001f69bfb55bf46a6bf0
SHA3-384 hash: b3f1a717eeca03269a28395bc31dc4534d8ae0eb88681f6c26a536ff6c34ba5838f76c61fe38b27e03906f1762dd529e
SHA1 hash: 87cbf8d4451e288ac05d4ef01593bab55fa39436
MD5 hash: 1a020afffcdea3a899dd138a0560a69a
humanhash: artist-sad-paris-eleven
File name:KREG New Order - AM2 PO 90664 (Panda Construction).rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:614'316 bytes
First seen:2020-07-17 05:12:02 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:f7NgGG9a3tpFl6ix6USGn48kYj72elRAeevQOEUfsf0Ny5H2v05mka:5+9a3RIIeYja2RtUfo5W4mka
TLSH E7D423D62DBB2690F98D908D5318FF3B9130B57B5A014EFC2E833171B1AC9D8D51A726
Reporter cocaman
Tags:MassLogger rar


Avatar
cocaman
Malicious email
From: "PURCHASE"<mvplproc@microfinishgroup.com>
Received: from microfinishgroup.com (unknown [185.222.57.154])
Date: 16 Jul 2020 13:25:43 -0700
Subject: New Order - AM2 PO 90664 (Panda Construction)
Attachment: KREG New Order - AM2 PO 90664 (Panda Construction).rar

Intelligence

File Origin
# of uploads :
1
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b3efc3524b8db0b1f4d10f9109c1da1730fa3682569b001f69bfb55bf46a6bf0/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-17 03:03:50 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
27 of 48 (56.25%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=wpx4guslrwyld5grb6iqtqo2c4ypunuck2nqah3jx62vx5dknpya._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Unknown
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/b3efc3524b8db0b1f4d10f9109c1da1730fa3682569b001f69bfb55bf46a6bf0

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar b3efc3524b8db0b1f4d10f9109c1da1730fa3682569b001f69bfb55bf46a6bf0

(this sample)

MassLogger

Executable exe efcb7e7f2d7fc92675b9d189448047612847392bfc10f9324e04a4c6c9c203bd

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 efcb7e7f2d7fc92675b9d189448047612847392bfc10f9324e04a4c6c9c203bd
  
Dropping
MassLogger

Comments