MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 78e494cf466d16bb68b782324fa83c0f597debcce4d3bac88301b3da116616d2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 78e494cf466d16bb68b782324fa83c0f597debcce4d3bac88301b3da116616d2
SHA3-384 hash: f8c86ac7fb17bbc5a9828b3022544e0a616d3b432e36eb6d911f4008a436a50cfcd5a79b645d80f85a6823227e8d0160
SHA1 hash: fc169b2d406f7742406e675228aef998b106ae6d
MD5 hash: 3db7a695150314adc5f834ace5cdb0b0
humanhash: failed-robin-fish-hamper
File name:MUYR09080.zip
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:584'457 bytes
First seen:2021-04-07 10:19:58 UTC
Last seen:2021-04-07 11:24:56 UTC
File type: zip
MIME type:application/zip
ssdeep 12288:o+QOS/vkjq7de1L18fRZXrukGSiUTFnTvtkn03WB:YoL18fLwsnTFkn0g
TLSH 10C42348814BC312AAC9D33A8EB15725E99B1E11376CB3D43122DBDA5735012A7FE71E
Reporter lowmal3

Intelligence

File Origin
# of uploads :
2
# of downloads :
117
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Heur.5118.5644.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Link:
https://labs.inquest.net/dfi/sha256/78e494cf466d16bb68b782324fa83c0f597debcce4d3bac88301b3da116616d2
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/78e494cf466d16bb68b782324fa83c0f597debcce4d3bac88301b3da116616d2/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2021-04-07 10:20:06 UTC
AV detection:
18 of 29 (62.07%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=pdsjjt2gnullw2fxqize7kb4b5mx326m4tj3vsedagz5uelgc3ja._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.57
Link:
https://yomi.yoroi.company/submissions/78e494cf466d16bb68b782324fa83c0f597debcce4d3bac88301b3da116616d2

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

zip 78e494cf466d16bb68b782324fa83c0f597debcce4d3bac88301b3da116616d2

(this sample)

SnakeKeylogger

Executable exe 446a9c4fe226595e6a506d2a27c4b433b5651f9f8110ab289371f080a596a779

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 446a9c4fe226595e6a506d2a27c4b433b5651f9f8110ab289371f080a596a779
  
Dropping
MD5 4138495cd942b253246d9bd965760aea

Comments