MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dcccc1ae7fbd698e283b21d2b577246c2af5ab6441710029b7a125dca7e22dd3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: dcccc1ae7fbd698e283b21d2b577246c2af5ab6441710029b7a125dca7e22dd3
SHA3-384 hash: 36cac38683c7e3ec9961ce552ae68769c00248cee0847c2297a79e3aae600f14649ae2113eb221d3edbc600b10d03b5c
SHA1 hash: ee769599f0435c1f2db68caa433b84cce8545285
MD5 hash: aee82237cd0fb7d7df9020da898b84c6
humanhash: harry-jig-arkansas-glucose
File name:GST invoice.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:859'248 bytes
First seen:2020-08-19 09:18:21 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:QgOsoRL48JZARXbd0JUW/OqDn8V09w7FYUOmkjG:c5fARLaSW/58W90SUKC
TLSH 9F0523BEFB267DFB1C1EA6601C51433A86A7AAB4548C92815D83513E6C54D843F0F2BF
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: icicibank.com
Sending IP: 185.222.57.136
From: ICICI Bank<gstinvoice@icicibank.com>
Subject: Transaction confirmation alert for your ICICI Bank Corporate Internet Banking
Attachment: GST invoice.zip (contains "(GST) invoice.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Delf.FareIt.Gen.12.24312.10509.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/dcccc1ae7fbd698e283b21d2b577246c2af5ab6441710029b7a125dca7e22dd3/
Threat name:
Win32.Spyware.Vebzenpak
Create hunting rule
Status:
Malicious
First seen:
2020-08-18 22:11:00 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=3tgmdlt7xvuy4kb3ehjlk5zenqvplk3eifyqaknxues5zj7cfxjq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip dcccc1ae7fbd698e283b21d2b577246c2af5ab6441710029b7a125dca7e22dd3

(this sample)

MassLogger

Executable exe 3fd662d7caf82ecc8b61b4fa261bc51510851aa36099a85f66c2689c507e11d7

  
Dropping
MD5 15e0b75a2789d1cea37238a56a576b83
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3fd662d7caf82ecc8b61b4fa261bc51510851aa36099a85f66c2689c507e11d7

Comments