MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 12fe89d0b26cbcddb8d6ab034db718afc5a908a76b5bb46502d088536b62361a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 12fe89d0b26cbcddb8d6ab034db718afc5a908a76b5bb46502d088536b62361a
SHA3-384 hash: 8c53512825afe3ce1983bd6eaf5b0f8e487ef98990cadad067e02327d28fbcfd3eaadfe0d0b46736446de75b637a7649
SHA1 hash: 6fad81b65120690d5596c01b6e2038b40ec37952
MD5 hash: f80cf8e2df0e8c4b1aa03b9a91c98ed7
humanhash: artist-minnesota-carpet-connecticut
File name:MILLS NEW ORDER.18022021.rar
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:594'910 bytes
First seen:2021-02-18 08:24:09 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:i17eYF3XAAHZ8yGkhdwdzFGuBGUk/uQlLLacIRF3dHk08N+h4fICh4S92Ok5qLOU:S7V3Xl4dvxk/xl6cIX3dbz/Chx99gqyU
TLSH 0CC423B983351AFAC83AD5BCED0B88C5E8BB3861D1138794D09F405588DABFE6D4914F
Reporter abuse_ch
Tags:rar SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: gmail.com
Sending IP: 45.15.143.132
From: Sue Robinson <sue.thestrictlylimitedcompany@gmail.com>
Subject: MILLS NEW ORDER.18022021
Attachment: MILLS NEW ORDER.18022021.rar (contains "MILLS NEW ORDER.18022021.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
110
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/12fe89d0b26cbcddb8d6ab034db718afc5a908a76b5bb46502d088536b62361a/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2021-02-18 08:25:06 UTC
AV detection:
7 of 47 (14.89%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=cl7itufsns6n3ogwvmbu3nyyv7c2scfhnnn3izic2cefg23cgyna._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/12fe89d0b26cbcddb8d6ab034db718afc5a908a76b5bb46502d088536b62361a

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

rar 12fe89d0b26cbcddb8d6ab034db718afc5a908a76b5bb46502d088536b62361a

(this sample)

SnakeKeylogger

Executable exe 87b3487f64f3be55dd90700c67617d28a65457759e801cefd5369872e3dc2c7f

  
Dropping
MD5 0aa00f0470dc38c15fe8e99376c5e272
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 87b3487f64f3be55dd90700c67617d28a65457759e801cefd5369872e3dc2c7f

Comments