MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e86a18deaabae18d09ad1e5a7e3f46f9f08e13ee41f7a06f674bca2ad3f98154. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



MassLogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: e86a18deaabae18d09ad1e5a7e3f46f9f08e13ee41f7a06f674bca2ad3f98154
SHA3-384 hash: 7df6069de583ef8f992333733fb06ba599fd002a0d600b171d5d16774e3bcd9e371637947b2ef994300abbf80b05b057
SHA1 hash: 08a2c9f63367eb7ed665cc173050f7a36cd7d5da
MD5 hash: f6e58333729e3b3f7fa37f8bb9f2a811
humanhash: east-california-wyoming-diet
File name:file.exe
Download: download sample
Signature MassLogger
File size:864'768 bytes
First seen:2020-06-17 10:13:57 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'742 x AgentTesla, 19'606 x Formbook, 12'242 x SnakeKeylogger)
ssdeep 24576:1CjurKlVBH/5rK2uP5rPTaUYn4Sp3jGLNR:1CjuwVBf5elPTax4oqLN
Threatray 902 similar samples on MalwareBazaar
TLSH 1905220277D8D22BC57D5B3AC0CA44044379AC573512D72F7AC8376E1AB2BE3694279B
Reporter abuse_ch
Tags:exe MassLogger


Avatar
abuse_ch
MassLogger SMTP exfil server:
mail.devor.com.mx:587

Intelligence


File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2020-06-17 10:37:27 UTC
AV detection:
24 of 31 (77.42%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

MassLogger

Executable exe e86a18deaabae18d09ad1e5a7e3f46f9f08e13ee41f7a06f674bca2ad3f98154

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments