MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 de13897a34f9fc29ff40b1b4695ce19db698cde1761fd3c12e7ea349bc8792ee. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: de13897a34f9fc29ff40b1b4695ce19db698cde1761fd3c12e7ea349bc8792ee
SHA3-384 hash: 3bbf4702999be919d2b6aa1a37c9d01abec478779125e8528a734082ff1e92b97b4f3226422e24c3fa941d45850a4ab2
SHA1 hash: 2d43656cade0d6258f76f7a8b16a5831dc218997
MD5 hash: 274c1a1735a5a56c2b2a5596e040cb06
humanhash: chicken-whiskey-lima-yellow
File name:Specification.gz
Download: download sample
Signature MassLogger
Create hunting rule
File size:796'560 bytes
First seen:2020-08-18 13:20:41 UTC
Last seen:Never
File type: gz
MIME type:application/gzip
ssdeep 24576:npqvCnC993Dhkyfr9SM4SYqZLJImdKgkMd:pWhk0rTYqhGmdGMd
TLSH E705333E15B75324F29B5024817A62971B00F6A13DEC3B36F03AF6A7A622DDDD0B542D
Reporter abuse_ch
Tags:gz MassLogger


Avatar
abuse_ch
Malspam distributing unidentified malware:

From: "Micheal Wu" <shafiul@mazadagroups.com>
Subject: Fw: Re: RE: New Order for September shipment
Attachment: Specification.gz (contains "Specification.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
54
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/de13897a34f9fc29ff40b1b4695ce19db698cde1761fd3c12e7ea349bc8792ee/
Threat name:
ByteCode-MSIL.Trojan.CryptInject
Create hunting rule
Status:
Malicious
First seen:
2020-08-18 13:22:05 UTC
AV detection:
26 of 48 (54.17%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=3yjys6ru7h6ct72awg2gsxhbtw3jrtpboyp5hqjop2rutpehslxa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/de13897a34f9fc29ff40b1b4695ce19db698cde1761fd3c12e7ea349bc8792ee

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

gz de13897a34f9fc29ff40b1b4695ce19db698cde1761fd3c12e7ea349bc8792ee

(this sample)

MassLogger

Executable exe 8e86d9234855b1ecd39a173027ac4486f443b4eb1896e28e8b2e79212107e762

  
Dropping
MD5 2303d010869146665ec2635ec1f84bbd
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8e86d9234855b1ecd39a173027ac4486f443b4eb1896e28e8b2e79212107e762

Comments