MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b5d4e0708c7f834fae9ad3fd3c0ef46310f520d4e6d970afeb8cf81ee8922ea0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b5d4e0708c7f834fae9ad3fd3c0ef46310f520d4e6d970afeb8cf81ee8922ea0
SHA3-384 hash: 0b722f376c96ae471d098e9063a6a64b2dd1568f1307ef79a4bf3c5518427b0862519768dab90ba778ba3ce274715d07
SHA1 hash: f18275de6b289ab5f06f5ed3138df30d316eda67
MD5 hash: e250386a4b5cf2da69f508f7881528e8
humanhash: solar-salami-washington-lake
File name:DOC89893467903678090.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:683'647 bytes
First seen:2020-09-14 13:11:07 UTC
Last seen:2020-09-14 21:06:26 UTC
File type: rar
MIME type:application/x-rar
ssdeep 12288:r9j3ZUwdbgEPjGP6uNIE1ShleKfNTqgPGGTYMhRi0NbuOGk6jAyiMdzHInUKXgAJ:B23EKPDNIIQpNHRi0/V+AyHon151y+x9
TLSH D2E423DF63C8129382355A395B5CF626C7E667C78CECC018D21E6C48A6D7E41B212DBD
Reporter GovCERT_CH
Tags:MassLogger

Intelligence

File Origin
# of uploads :
2
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b5d4e0708c7f834fae9ad3fd3c0ef46310f520d4e6d970afeb8cf81ee8922ea0/
Threat name:
Win32.Backdoor.Androm
Create hunting rule
Status:
Malicious
First seen:
2020-09-14 00:41:40 UTC
AV detection:
14 of 29 (48.28%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=wxkoa4emp6bu7lu22p6tydxummipkigu43mxbl7lrt4b52esf2qa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/b5d4e0708c7f834fae9ad3fd3c0ef46310f520d4e6d970afeb8cf81ee8922ea0

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar b5d4e0708c7f834fae9ad3fd3c0ef46310f520d4e6d970afeb8cf81ee8922ea0

(this sample)

MassLogger

Executable exe 9f0866780aa84107697212f1b3578777c450861c02a6e01f5741de28c858900c

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9f0866780aa84107697212f1b3578777c450861c02a6e01f5741de28c858900c
  
Dropping
MD5 38ff4f1dca7e1a5ccde78f14889e0f63

Comments