MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0597f1312c30018360be8a7e5ca95d7d02645054a20b77ccbddfbdf76253c3b5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 0597f1312c30018360be8a7e5ca95d7d02645054a20b77ccbddfbdf76253c3b5
SHA3-384 hash: f107811c75e46ae05b056519b0d39647507c5596e4fe9de15cd4207c475d4308559cb81389eb0f5eab8aaf528f6a3183
SHA1 hash: 78e300deba137953e960599997672903b8f41ce7
MD5 hash: a1dd540aef3cf68b744f6da84e916393
humanhash: social-zulu-kentucky-kansas
File name:IMG_50781.img
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:2'097'152 bytes
First seen:2021-01-20 06:31:45 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:TS50jwcEc6tXEF+jrwQdB+Vdu/0Rzs+fLYo/HpmsYeH0b5e7bagVGc:T+08cEc6tXEFO9dwz9j/Ub5e7bRc
TLSH C8A5BF0652164193E9683C7A842F2F944784ABBD3893D387B80E3763FB51FCD5A865F8
Reporter abuse_ch
Tags:img SnakeKeylogger


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: subi.iwebi.in
Sending IP: 148.251.54.43
From: Cyrus Dmitriy <rebecca88@storing.ml>
Subject: stock statement for the month of january-2021
Attachment: IMG_50781.img (contains "IMG_50781.pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
163
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Iso_fs2061.UNOFFICIAL
Create hunting rule

PUA.Win.Trojan.Generic-6629274-0
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/0597f1312c30018360be8a7e5ca95d7d02645054a20b77ccbddfbdf76253c3b5/
Threat name:
Win32.Trojan.Zmutzy
Create hunting rule
Status:
Malicious
First seen:
2021-01-20 06:32:08 UTC
AV detection:
8 of 45 (17.78%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=awl7cmjmgaaygyf6rj7fzkk5pubgiucuuifxptf53667oystyo2q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/0597f1312c30018360be8a7e5ca95d7d02645054a20b77ccbddfbdf76253c3b5

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

img 0597f1312c30018360be8a7e5ca95d7d02645054a20b77ccbddfbdf76253c3b5

(this sample)

SnakeKeylogger

Executable exe daa6dbdc8820fd2049680ae3a25ff25d14245a39d75717cc5e3b06f042c82585

  
Dropping
MD5 86b473ac3935c031354a80662a66e7c7
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 daa6dbdc8820fd2049680ae3a25ff25d14245a39d75717cc5e3b06f042c82585

Comments