MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c6fe57e614145a93c0228f4fa22f26187f0c70bd373e5d4e59a93172ba9520f0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c6fe57e614145a93c0228f4fa22f26187f0c70bd373e5d4e59a93172ba9520f0
SHA3-384 hash: d267e6644bb675edeb92ca54ffa3df2d161fe4410aab17000d22b4d04e33e0cd214caf7621ecd3cd842d3794e844a4ee
SHA1 hash: 09fdbcaf6973d769599b6270c46ef14fe3f2b508
MD5 hash: 799304b72964c244c7a1c12398505140
humanhash: equal-monkey-one-four
File name:Order List.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:871'440 bytes
First seen:2020-05-27 07:48:03 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:65ndxsaMnqp7KzGV0OdN4ILEO2h5ssFNWXq0FWmcFmSsr0NAN+BUC2:65Ck2vAknjtujcFmSsr0aCa
TLSH 5B052383C58F17C181C945F8AF611AF78EB2B45690BCCBEFF417A6845983D6F974808A
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: mail.909.com.tw
Sending IP: 218.32.210.122
From: Morris <morris@win-textile.com>
Subject: Re: New Order List
Attachment: Order List.zip (contains "Order List.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.21644.ZipHeur.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.23990.ZipHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-27 09:12:02 UTC
File Type:
Binary (Archive)
Extracted files:
14
AV detection:
12 of 47 (25.53%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip c6fe57e614145a93c0228f4fa22f26187f0c70bd373e5d4e59a93172ba9520f0

(this sample)

MassLogger

Executable exe 112d707367a7101031fb617c9514187ca68b817a27b6b6a2ecc1b737dc974a1a

  
Dropping
MD5 f7ce9ae72c2106ca0b0b85188b43f758
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 112d707367a7101031fb617c9514187ca68b817a27b6b6a2ecc1b737dc974a1a

Comments