MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7bd2e15ff319a761b48a511bcd7d8be41c8dcf2062183eb04dd03e78271113f6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7bd2e15ff319a761b48a511bcd7d8be41c8dcf2062183eb04dd03e78271113f6
SHA3-384 hash: 0baa28d872d57a8bc93c78eb3ae9876d63046c2ae2e9d6e75d2a40f39851560f74f6260d3931e6aa2a839eca266ff765
SHA1 hash: 9d5935b97310805f691a9e8f35b44b33c35a06be
MD5 hash: 11f774864744cbb5beccc117fe1204df
humanhash: eight-papa-mike-arizona
File name:Message Body.img
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:1'769'472 bytes
First seen:2021-04-08 15:49:43 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:gOg7YYjOFLb++KSIC9eygOQIOPSWfpIKlswt8sKWKN/Wt2Ks0Q9SBkYPli:BgqF2+J9fQ1zXRt8sKWKNz6QQ/E
TLSH A1857D91B2508996E97B07F2AC2A542012B3BFDC6469C21C599D77DA3AB334134DFE0F
Reporter abuse_ch
Tags:Endurance img SnakeKeylogger


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: 162-144-100-85.unifiedlayer.com
Sending IP: 162.144.38.36
From: PAY-U INT'L <sales9@oxy99.in>
Subject: PLEASE CONFIRM
Attachment: Message Body.img (contains "Message Body.scr")

Intelligence

File Origin
# of uploads :
1
# of downloads :
202
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Inject4.10371.29329.10184.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7bd2e15ff319a761b48a511bcd7d8be41c8dcf2062183eb04dd03e78271113f6/
Threat name:
Win32.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2021-04-08 15:59:49 UTC
AV detection:
11 of 47 (23.40%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ppjocx7tdgtwdnekken427ml4qoi3tzamimd5mcn2a7hqjyrcp3a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/7bd2e15ff319a761b48a511bcd7d8be41c8dcf2062183eb04dd03e78271113f6

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

img 7bd2e15ff319a761b48a511bcd7d8be41c8dcf2062183eb04dd03e78271113f6

(this sample)

SnakeKeylogger

Executable exe 86a1bdb2e8880eab5d158b6bab714ca09193ad21b8b3b72c10aec58f7f638333

  
Dropping
MD5 6077370e881a808f55887f7a2f0c9b82
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 86a1bdb2e8880eab5d158b6bab714ca09193ad21b8b3b72c10aec58f7f638333

Comments