MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e1a9019ec45ae23e87d416b631eb22e00bc00dfe51aab5df92aa835e9b43a47c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e1a9019ec45ae23e87d416b631eb22e00bc00dfe51aab5df92aa835e9b43a47c
SHA3-384 hash: 68b1a48df8a20687760ca953036b6a01116b5d00aa916dc86944055bbff196fa70ded1f6c034dc69b519ee155f54eb42
SHA1 hash: c42d77dca04ed005ca775f98f0318dafac714ea8
MD5 hash: 8e19158a80bcb0fdfad35a286ffcead2
humanhash: muppet-venus-oven-uncle
File name:RFQ 20201027.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:739'985 bytes
First seen:2020-10-27 12:41:39 UTC
Last seen:2020-10-27 22:11:08 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:NndMdqdK/NApetOg/2Pp7uBexBiWdPKxBWMPlAmKo7dMHK+iq:NmEKOGwkgUEqBWuKo7Wq+z
TLSH 7BF43365A4C7C5D63ECF3929AFA75B9034F75024C894441F782F8214D3F0A8BB2AE979
Reporter abuse_ch
Tags:MassLogger zip


Avatar
abuse_ch
Malspam distributing MassLogger:

HELO: aplgloballogistic.com
Sending IP: 156.96.118.35
From: Maen Al Khateeb <info@aplgloballogistic.com>
Subject: RE: RFQ 2025966
Attachment: RFQ 20201027.zip (contains "chibyke09.exe")

Intelligence

File Origin
# of uploads :
3
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Artemis0194C548A530.28501.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e1a9019ec45ae23e87d416b631eb22e00bc00dfe51aab5df92aa835e9b43a47c/
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=4guqdhwellrd5b6uc23dd2zc4af4adp6kgvllx4svkbv5g2dur6a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Trojan
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/e1a9019ec45ae23e87d416b631eb22e00bc00dfe51aab5df92aa835e9b43a47c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip e1a9019ec45ae23e87d416b631eb22e00bc00dfe51aab5df92aa835e9b43a47c

(this sample)

MassLogger

Executable exe 54cbbd379c30bc361abc3b1e262f0a763fcb5482f4b93c6275264759f404dfd8

  
Dropping
MD5 aa9e037c9c63121773eb5dca79136324
  
Dropping
MassLogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 54cbbd379c30bc361abc3b1e262f0a763fcb5482f4b93c6275264759f404dfd8

Comments