MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 da4e7c4cfcaf3e2d4718f9f9bcfac9cb14c0fe404f9985484ca5a081e8344d74. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


404Keylogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: da4e7c4cfcaf3e2d4718f9f9bcfac9cb14c0fe404f9985484ca5a081e8344d74
SHA3-384 hash: c1dbfedff48ba095dba8b95dcc6d293360cc05be95e4c8a2e8a91f3450d90a98ab5660b3fd96d61adc4c45b90c77e2ae
SHA1 hash: 8b02ee5067e87300de3bd124f3410de8a342c220
MD5 hash: 4e6debb92edbe3fe2f5de69fad5a4cac
humanhash: two-bulldog-kilo-crazy
File name:Reciept2020.rar
Download: download sample
Signature 404Keylogger
Create hunting rule
File size:422'218 bytes
First seen:2020-05-15 07:33:05 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:V3J5r5L75s3xd5y2LPbff8geE8JgMrX4oD:V3J5V5sXAEPL8nE8JgCX4oD
TLSH DC9423289C227B6D4A051DE6E86551B1FBC0941BEE5FB1FB98C2C98A73B13CD3877508
Reporter abuse_ch
Tags:404Keylogger rar


Avatar
abuse_ch
Malspam distributing 404Keylogger:

HELO: gsa-data.org
Sending IP: 45.249.91.173
From: Store<info@gsa-data.org>
Subject: Fw: Payment
Attachment: Reciept2020.rar (contains "Zcgogex.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
90
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-15 07:36:26 UTC
File Type:
Binary (Archive)
Extracted files:
43
AV detection:
15 of 48 (31.25%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=3jhhyth4v47c2ryy7h43z6wjzmkmb7saj6mykscmuwqid2bujv2a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

404Keylogger

rar da4e7c4cfcaf3e2d4718f9f9bcfac9cb14c0fe404f9985484ca5a081e8344d74

(this sample)

404Keylogger

Executable exe f56671421295bb65ac0572a24d6638c072465d4061eb7f1e8ad9fdc3c2967913

  
Dropping
MD5 50c1a3d982588d77b38550872e6c42c3
  
Dropping
404Keylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f56671421295bb65ac0572a24d6638c072465d4061eb7f1e8ad9fdc3c2967913

Comments