MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c66e852871402c8790e733a2c84a9490b8906b6769788135cf886fd905c6e2a3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


404Keylogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c66e852871402c8790e733a2c84a9490b8906b6769788135cf886fd905c6e2a3
SHA3-384 hash: 90f07448fed83ab5540abd0ca1686bd055f9fcb64a2c663444e8e10bcd2dec3e64c7843d37a568a5bea785fb29f9852b
SHA1 hash: 62d9b7ac58832f2b40d624cf7cc06717e1a39229
MD5 hash: 4f1225c09bc1e748023467f65705eac5
humanhash: november-hydrogen-maine-kitten
File name:TAJ ALKHIRRAT PO NO102018REV1.zip
Download: download sample
Signature 404Keylogger
Create hunting rule
File size:755'198 bytes
First seen:2020-05-15 04:54:17 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:aPG46u/QJykc7+uIIuhsFXWnx9FsacT2+6CJhilmAGgcC8B8znBJmGS9FsuxFV:r9u/L7+JIcsFXM9FsacT2g3ZgwMI+eFV
TLSH 59F423FCC5DC28FF93683C6A934A1B8B94142D5E69CD09104DBC6F019AA6CB94ADCFD0
Reporter jarumlus
Tags:404Keylogger

Intelligence

File Origin
# of uploads :
1
# of downloads :
87
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Rogue.0hr.20200515-0404.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.PSW.Agent.BORA.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Predator
Create hunting rule
Status:
Malicious
First seen:
2020-05-15 00:28:41 UTC
File Type:
Binary (Archive)
Extracted files:
12
AV detection:
20 of 31 (64.52%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=yzxikkdriawipehhgormqsuusc4ja23hnf4icnoprbx5sbog4krq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

404Keylogger

zip c66e852871402c8790e733a2c84a9490b8906b6769788135cf886fd905c6e2a3

(this sample)

404Keylogger

Executable exe 20f915f2da2ed5058de670c17dde36d863699fdca9a64edfcfb4e1dd9db46b39

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 20f915f2da2ed5058de670c17dde36d863699fdca9a64edfcfb4e1dd9db46b39
  
Dropping
MD5 ccf45a5db4f9a66a753bf814773cedb5

Comments