MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c14e0c6f189b8b5299d0c29694b4dc8bc559dc496a4b7991d2e3b5114794f858. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c14e0c6f189b8b5299d0c29694b4dc8bc559dc496a4b7991d2e3b5114794f858
SHA3-384 hash: f6c895aa4d105f6b1ad9b0ca4e9c361e1f107187e289d379cbfb38b45b7fac74c226b5b014f33cc18fde555147cfb22d
SHA1 hash: 274fe0ab88985c273ee9de600bd63825f8f834ea
MD5 hash: 54c6f1437871bff962128643ef4f302c
humanhash: queen-jig-saturn-undress
File name:PO7883.pdf.z
Download: download sample
Signature MassLogger
Create hunting rule
File size:860'154 bytes
First seen:2020-07-29 03:55:38 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:CLYJfScAJmTkqh9N6sHWwGFpk2+Tr1ziTdy1tz//slu4HE1lSnOBxn8F:CKS0Aqh+F3E2+Vzq6ZYBkKE8F
TLSH 6B0533DE0D73DBC008B0E1E8A7A58D057AB98E5D5DC66B880D0E02D0B87BB71A735D76
Reporter jarumlus
Tags:MassLogger

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.BackDoor.SpyBotNET.25.18000.23185.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25518.ZipHeur.Ext.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c14e0c6f189b8b5299d0c29694b4dc8bc559dc496a4b7991d2e3b5114794f858/
Threat name:
Win32.Trojan.DataStealer
Create hunting rule
Status:
Malicious
First seen:
2020-07-28 03:11:40 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=yfhay3yytofvfgoqykljjng4rpcvtxcjnjfxteos4o2rcr4u7bma._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Tinba
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/c14e0c6f189b8b5299d0c29694b4dc8bc559dc496a4b7991d2e3b5114794f858

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip c14e0c6f189b8b5299d0c29694b4dc8bc559dc496a4b7991d2e3b5114794f858

(this sample)

MassLogger

Executable exe 391bd050efa8e5d02a1d1a5bb174374efce434f2457fdb0ca4c26f92341e4fa5

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 391bd050efa8e5d02a1d1a5bb174374efce434f2457fdb0ca4c26f92341e4fa5
  
Dropping
MD5 ada5beecde7f9234cfea4e0654758f9e

Comments