MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ce00fcfdea8167482006061fc894b02962b57fc44dcba57c51e636660bfe7392. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ce00fcfdea8167482006061fc894b02962b57fc44dcba57c51e636660bfe7392
SHA3-384 hash: 886ae9ab99d8c5f7a5e8dbda2ce4cddb6594bd0e894d183aa5641fc1d8a88258e96f632a8ee1be8d9de3d325303ddd5f
SHA1 hash: 055e335c1f7192e06c2f504bf4502c28d3ee37ec
MD5 hash: 993bd9e50990d5d04422f1fe5157efc5
humanhash: minnesota-wyoming-diet-whiskey
File name:WAY BILL.r00
Download: download sample
Signature MassLogger
Create hunting rule
File size:804'553 bytes
First seen:2020-10-16 12:41:10 UTC
Last seen:Never
File type: r00
MIME type:application/x-rar
ssdeep 24576:lHS+CdYGT1G7j5muyNBSwJn8owXVQvwNRUhrFV:E+CdA7Fu8XQvwNRsV
TLSH 9D0533A5C480C909A9BB2F03D73B901338CF3FB0D842F5E515A98FB64E5A7BC591B225
Reporter abuse_ch
Tags:MassLogger r00


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: slot0.quinncornpany.com
Sending IP: 45.95.169.158
From: Ada Lei <info@marcegaglia.com>
Subject: SEA WAY BILL
Attachment: WAY BILL.r00 (contains "WAY BILL.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ce00fcfdea8167482006061fc894b02962b57fc44dcba57c51e636660bfe7392/
Threat name:
ByteCode-MSIL.Spyware.Stelega
Create hunting rule
Status:
Malicious
First seen:
2020-10-16 02:29:15 UTC
AV detection:
18 of 48 (37.50%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=zyapz7pkqftuqiagayp4rffqffrlk76ejxf2k7cr4y3gmc76ooja._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/ce00fcfdea8167482006061fc894b02962b57fc44dcba57c51e636660bfe7392

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

r00 ce00fcfdea8167482006061fc894b02962b57fc44dcba57c51e636660bfe7392

(this sample)

MassLogger

Executable exe bbcaf0746383dc1928fe53805da2d9bb28123e7495d48759202a46217e6b456d

  
Dropping
MD5 137f5fbd9080157bdc7048390d9d8c7c
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 bbcaf0746383dc1928fe53805da2d9bb28123e7495d48759202a46217e6b456d

Comments