MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e64ab6d5c019e0cc79bc6b60cd868df87e41b5a7a75085da70de3c1d2fda7e41. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e64ab6d5c019e0cc79bc6b60cd868df87e41b5a7a75085da70de3c1d2fda7e41
SHA3-384 hash: 2520ae8838471a7c9c70c15113dcc73e8bb1595c17cf41b962dc9bf8bc7e83c6db9fafb99c60e6330cb2461fe7c7f314
SHA1 hash: 53e46ff7840830678df20815b83c3709bb04f504
MD5 hash: ab5f9d3fe5dc0996442bf92fc36b0e5a
humanhash: edward-virginia-maryland-finch
File name:PO NOAB1088-2020.pdf.zip
Download: download sample
Signature MassLogger
Create hunting rule
File size:677'972 bytes
First seen:2020-07-14 06:05:01 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:3IgYyaogyKHFca/0ao3BT2paJw+QZwRDLs/RFCyfJ5lISJSFUv:3eyKHKaXbkJW6Q/RFC65ldP
TLSH E7E423EA121494827BA35C898577B43D3B0CD3A2F485645B8F3E2654702AFFDD65CED0
Reporter cocaman
Tags:MassLogger zip


Avatar
cocaman
Malicious email
From: "Mr. VIKAS C E" <mvplproc@microfinishgroup.com>
Received: from microfinishgroup.com (unknown [185.222.57.154])
Date: 13 Jul 2020 20:11:16 -0700
Subject: RE: PO NO:AB1088 // Microfinish Valves Pvt Ltd
Attachment: PO NOAB1088-2020.pdf.zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.Kryptik.VFR-1.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25518.ZipHeur.Ext.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e64ab6d5c019e0cc79bc6b60cd868df87e41b5a7a75085da70de3c1d2fda7e41/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-14 05:30:12 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
24 of 48 (50.00%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=4zflnvoadhqmy6n4nnqm3bun7b7ednnhu5iilwtq3y6b2l62pzaq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

zip e64ab6d5c019e0cc79bc6b60cd868df87e41b5a7a75085da70de3c1d2fda7e41

(this sample)

MassLogger

Executable exe a2d04087127197f6a4ae49039fbc2c2dc750ee0fe2d71965a7c675d556d362d3

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a2d04087127197f6a4ae49039fbc2c2dc750ee0fe2d71965a7c675d556d362d3
  
Dropping
MassLogger

Comments