MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1ab474ce98e9d4f26f4c11f59cc2c34a87ab5a646396e4d680bd2bf997b8cfae. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


404Keylogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1ab474ce98e9d4f26f4c11f59cc2c34a87ab5a646396e4d680bd2bf997b8cfae
SHA3-384 hash: ebe6fde4241fe7d58e3948479ef808389bb448c0226a3add621e42c5458207607fdf4990f2f4f82b7986f9cc4ae47a8a
SHA1 hash: de4c2a3b0fbd8238919f2caa2399ba403ccabf9e
MD5 hash: f04e18f15f5cbbb962475af764555332
humanhash: fifteen-bacon-stream-october
File name:PACKING LIST UPDATE 45201750254.gz
Download: download sample
Signature 404Keylogger
Create hunting rule
File size:305'702 bytes
First seen:2020-08-03 14:14:30 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 6144:nL31lX/4YyY8DNR9IyoGqYK/jo69h/vkNrIsz4iyn1vZ8Vj:n5V/bgJ69BerIskiIKj
TLSH 6B5423371E42729DA4B721382C1AE3A8A71A6DE203E17E54E7CD49C0B2747F6944A387
Reporter abuse_ch
Tags:404Keylogger gz


Avatar
abuse_ch
Malspam distributing 404Keylogger:

HELO: gmail.com
Sending IP: 185.222.57.207
From: Nam Nguyễn Trọng <namnt16590@gmail.com>
Subject: Lại: danh sách kiểm TRA ST INQ 1119
Attachment: PACKING LIST UPDATE 45201750254.gz (contains "PACKING LIST UPDATE 45201750254.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1ab474ce98e9d4f26f4c11f59cc2c34a87ab5a646396e4d680bd2bf997b8cfae/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-08-03 08:01:07 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=dk2hjtuy5hkpe32mch2zzqwdjkd2wwtemolojvuaxuv7tf5yz6xa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/1ab474ce98e9d4f26f4c11f59cc2c34a87ab5a646396e4d680bd2bf997b8cfae

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

404Keylogger

gz 1ab474ce98e9d4f26f4c11f59cc2c34a87ab5a646396e4d680bd2bf997b8cfae

(this sample)

404Keylogger

Executable exe 946200f42fe267c47b2e0983a1d2e1249b78433412f4a0874eee89d985b76553

  
Dropping
MD5 d5352c6bb63c982f9e28e53f2770273d
  
Dropping
404Keylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 946200f42fe267c47b2e0983a1d2e1249b78433412f4a0874eee89d985b76553

Comments