MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 50eddcf3e8d2dfe56d36efc1c29c3bb7406fb8f23d794e45e44dbf3eb9d2069c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 50eddcf3e8d2dfe56d36efc1c29c3bb7406fb8f23d794e45e44dbf3eb9d2069c
SHA3-384 hash: c0a4dbc3cb15f58b274f924b8361deca4b72897370b793971912839cba0846d5d8356280022239004299f293cfd15752
SHA1 hash: 71f7cfff5996d1db090d105d0ae3cf4167991bbb
MD5 hash: 70fe8c3ee06a80ab72b441b76b9b1b67
humanhash: montana-oregon-colorado-tango
File name:0900000000000090.uue
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:444'892 bytes
First seen:2021-02-09 13:11:24 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:R1tskMHBzkw6Mdp1OTzyvyDqzGkfv8ZOYL393:R1tskMH2wzooiAvCj93
TLSH F39423377ADE2C586C61117EFD288FADF531BD1665229C28E80CB8773BD2013416F86A
Reporter abuse_ch
Tags:SnakeKeylogger uue


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: hosted-by.rootlayer.net
Sending IP: 45.137.22.52
From: accounting@abkcoal.com
Subject: FACTURA DE GRUPO ELECTRICO
Attachment: 0900000000000090.uue (contains "0900000000000090.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
111
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Zip_exenum416.UNOFFICIAL
Create hunting rule

PUA.Win.Downloader.Soft32downloader-6691270-0
Create hunting rule

Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/50eddcf3e8d2dfe56d36efc1c29c3bb7406fb8f23d794e45e44dbf3eb9d2069c/
Threat name:
Win32.Trojan.Woreflint
Create hunting rule
Status:
Malicious
First seen:
2021-02-09 13:12:15 UTC
AV detection:
22 of 29 (75.86%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=kdw5z47i2lp6k3jw57a4fhb3w5ag7ohshv4u4rpejw7t5oosa2oa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/50eddcf3e8d2dfe56d36efc1c29c3bb7406fb8f23d794e45e44dbf3eb9d2069c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

zip 50eddcf3e8d2dfe56d36efc1c29c3bb7406fb8f23d794e45e44dbf3eb9d2069c

(this sample)

SnakeKeylogger

Executable exe 47330cd2d55a4e42ef2e40230761936e13be6ec360ae0121c8494161841011b7

  
Dropping
MD5 748387dd6ab8159661f14f346f5b5080
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 47330cd2d55a4e42ef2e40230761936e13be6ec360ae0121c8494161841011b7

Comments