MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bd2cf4ae32bb8ea13e97d2807806f150179290346dd13e2b6c1519fe0088864f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: bd2cf4ae32bb8ea13e97d2807806f150179290346dd13e2b6c1519fe0088864f
SHA3-384 hash: 4dfe455fb98be76cbbf5ea62ea2c8bd236da67b4261aa2493878f2ebd37e42e2d95dd768a0de1ccbca152fe49f50dc0f
SHA1 hash: 7b3c6cd661068232afa9eeb1d434d34af7e10ebf
MD5 hash: a6b12bb265205a4b6900d5b568ebe534
humanhash: july-ceiling-mexico-three
File name:QUOTATION 014-S180053A.rar
Download: download sample
Signature MassLogger
Create hunting rule
File size:883'481 bytes
First seen:2020-11-04 14:22:52 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:IgUmX4dIukjRFpvipTg+EDRxueXkTLPu2wT3FN/tduukQua7b9sxXavPW3+8OgM:IW4dIuOpSTgNRQPTL+pZRkHRavPWAd
TLSH 1B15338A0D3741DF796713B7C2D923370B76F8188EEE8816DF669601671A7220706BEC
Reporter abuse_ch
Tags:MassLogger rar


Avatar
abuse_ch
Malspam distributing MassLogger:

From: "Annjelli Mabini" <purchasing@petronav.com.cy>
Reply-To: info.abidullafouad78@yahoo.com
Subject: quote
Attachment: QUOTATION 014-S180053A.rar (contains "QUOTATION 014-S180053A.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/bd2cf4ae32bb8ea13e97d2807806f150179290346dd13e2b6c1519fe0088864f/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-11-04 14:24:06 UTC
AV detection:
6 of 48 (12.50%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=xuwpjlrsxohkcpux2kahqbxrkalzfebunxit4k3mcum74aeiqzhq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

rar bd2cf4ae32bb8ea13e97d2807806f150179290346dd13e2b6c1519fe0088864f

(this sample)

MassLogger

Executable exe 061e4c2aaf9eb384ce88acacafa133185ede67c01c1ad01d1949218e04901c6b

  
Dropping
MD5 b63890661a387c1b409616b89c405937
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 061e4c2aaf9eb384ce88acacafa133185ede67c01c1ad01d1949218e04901c6b

Comments