MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7a8d50c6c290fc8da242464a2ed2eae647bc2bf46d656fd1cfba92b58e789848. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7a8d50c6c290fc8da242464a2ed2eae647bc2bf46d656fd1cfba92b58e789848
SHA3-384 hash: d24d228cf11a1ba0bd15ff29ac41b777c846f915a59cd2f4e94f73e58cf84c79e0858d92f306b114a98ed39c5d3efdd0
SHA1 hash: 0f9426a269cbbfaba9513720518c5cf1a045161a
MD5 hash: 4ad6b1993ca75de71d1b81a3e183bfe6
humanhash: fanta-burger-montana-lactose
File name:imageedit_1_3346844908_LHC.img
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:749'568 bytes
First seen:2021-02-16 14:20:10 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:orrS879xdroxz7trthuoU+0mOMAMJqJFLwKD2i9WHg+hjiYgM:E9o9trzMgOMAMJq/L9D2isA+fx
TLSH 89F4F1A2B753C491DC3306F48A51A3AD5EA36F192C25C1EB766CFFC96733682B805217
Reporter abuse_ch
Tags:img SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: megarubbertech.com
Sending IP: 45.133.203.99
From: Purchase Department <nenad@megarubbertech.com>
Subject: Attached PO
Attachment: imageedit_1_3346844908_LHC.img (contains "imageedit_1_3346844908_LHC.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
98
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Downloader.Soft32downloader-6691270-0
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7a8d50c6c290fc8da242464a2ed2eae647bc2bf46d656fd1cfba92b58e789848/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2021-02-16 13:45:51 UTC
AV detection:
13 of 47 (27.66%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=pkgvbrwcsd6i3iscizfc5uxk4zd3yk7unvsw7uopxkjlldtytbea._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/7a8d50c6c290fc8da242464a2ed2eae647bc2bf46d656fd1cfba92b58e789848

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

img 7a8d50c6c290fc8da242464a2ed2eae647bc2bf46d656fd1cfba92b58e789848

(this sample)

SnakeKeylogger

Executable exe b3fd5cc76729cfec4f1276888efbb03242da731a2e098c298d90397463b9c15b

  
Dropping
MD5 94f5379448c6b651ae1e1e88e996e9f7
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b3fd5cc76729cfec4f1276888efbb03242da731a2e098c298d90397463b9c15b

Comments