MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7600f172b159ad55d68fe7a0e9f6fe7860926a9b5d6b3aadeb7c2de2a5354a26. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7600f172b159ad55d68fe7a0e9f6fe7860926a9b5d6b3aadeb7c2de2a5354a26
SHA3-384 hash: fedc509b8032f3b64d14bf92850404c7429ba8cb6677b1cef5e7b8cd58bd26af3c1a4b5d0653ab61baff6df63e3ed5ea
SHA1 hash: 6ed44161238f8889d5d151e401479c9b25016158
MD5 hash: d6a5e38dd7edc20fa44ad2b0387dfa66
humanhash: uncle-may-ohio-one
File name:SOA.rar
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:535'979 bytes
First seen:2021-02-17 16:18:59 UTC
Last seen:2021-02-21 15:25:15 UTC
File type: rar
MIME type:application/x-rar
ssdeep 12288:GJK5gGn95ynyPb4gvB+0nGmck7+jSdRUlWLNbr+pgB4B6nstcXto4:GJ4kwvp+EBc9mwwYg2Ltc/
TLSH 80B4238EF1127F15D3092FAB7B1379DA02AD585C9BA37A80513B1B03AED26CBC10CB55
Reporter abuse_ch
Tags:rar SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: noblegrain.com
Sending IP: 103.99.1.142
From: sprabhudesai@noblegrain.com
Subject: Updated SOA
Attachment: SOA.rar (contains "SOA.exe")

Intelligence

File Origin
# of uploads :
2
# of downloads :
112
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7600f172b159ad55d68fe7a0e9f6fe7860926a9b5d6b3aadeb7c2de2a5354a26/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2021-02-17 16:19:10 UTC
AV detection:
5 of 47 (10.64%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=oyapc4vrlgwvlvup46qot5x6pbqje2u3lvvtvlplpqw6fjjvjita._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

rar 7600f172b159ad55d68fe7a0e9f6fe7860926a9b5d6b3aadeb7c2de2a5354a26

(this sample)

SnakeKeylogger

Executable exe ac77fcbe1456c6fbc62e66bece175cc00a33eaab4353830c7fcf25116891ceac

  
Dropping
MD5 b0be16b78d21ae5c42c8309fcb54cdaa
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ac77fcbe1456c6fbc62e66bece175cc00a33eaab4353830c7fcf25116891ceac

Comments