MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 23a7eae6c389a28ddd5ba849fb714b204b0836071241a35d97fa78aa1ee8f55a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 23a7eae6c389a28ddd5ba849fb714b204b0836071241a35d97fa78aa1ee8f55a
SHA3-384 hash: 6c8059ba2aba0e54afffa99295fca98b0ee6ac1ccbbbe36704c931c570acc53521ae9a00007e288c7bbec3759e0b193b
SHA1 hash: 1e2c141202a8711ee78aa0d0c36bb910cd87b334
MD5 hash: 11995032b26aaf47123da10346159863
humanhash: victor-massachusetts-three-undress
File name:Transfer Form.img
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:1'376'256 bytes
First seen:2021-03-05 13:08:11 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:p+fDikhAXmfBxMa2yn5WBXxoBj619pkGIEK9gfPWg:p+7ikh3iyn5AXxoUpTV
TLSH E155BEE12678D1B6C0E35F7F696E5472BDE3228C1C46C45038FAF3094EA976950FE1A8
Reporter abuse_ch
Tags:img SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: miracle-cpanel.miracletechnologies.ca
Sending IP: 23.186.192.229
From: PAY-U INT'L <account@payu.com>
Reply-To: PAY-U INT'L <accountpayu@f5.si>
Subject: Please Confirm
Attachment: Transfer Form.img (contains "Transfer Form.scr")

Intelligence

File Origin
# of uploads :
1
# of downloads :
180
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Heur.14775.12773.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/23a7eae6c389a28ddd5ba849fb714b204b0836071241a35d97fa78aa1ee8f55a/
Threat name:
Win32.Trojan.Pwsx
Create hunting rule
Status:
Malicious
First seen:
2021-03-05 13:09:19 UTC
AV detection:
9 of 48 (18.75%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=eot6vzwdrgri3xk3vbe7w4klebfqqnqhcja2gxmx7j4kuhxi6vna._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/23a7eae6c389a28ddd5ba849fb714b204b0836071241a35d97fa78aa1ee8f55a

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

img 23a7eae6c389a28ddd5ba849fb714b204b0836071241a35d97fa78aa1ee8f55a

(this sample)

SnakeKeylogger

Executable exe 4e45ef94e7b771db10a5c6d7da6d48277cad20393f8be6969bac8e82fc5bad55

  
Dropping
MD5 c12469045a083b8bf2b0690b65336fdb
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4e45ef94e7b771db10a5c6d7da6d48277cad20393f8be6969bac8e82fc5bad55

Comments