MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 845224c39304106cbee21ed234fd8614f4fd41a17f68031b4596c53cb15252d1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 845224c39304106cbee21ed234fd8614f4fd41a17f68031b4596c53cb15252d1
SHA3-384 hash: f03a4fd6276823b0246611fc9b84f158c8f54c79846bb636917b42d35d8d425178611bacdc85966bcb877f6881c84e5b
SHA1 hash: fb5759e2a3d149c2ed2887f0352edd83b387e175
MD5 hash: 59132d594848e79a7d6ed46307a8d1c5
humanhash: ten-snake-undress-florida
File name:IMG_06037doc.img
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:1'835'008 bytes
First seen:2021-02-15 06:52:25 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 24576:uCYzHSvi7AYaf+dk+gzsYr8zjof+FqSzZ:czPAYaf+2JzJYQf+FxzZ
TLSH A285F1236662C655CC255936841EC0F9A7F86D1B38A0C38FB88D3B673B70D4F7788966
Reporter abuse_ch
Tags:img SnakeKeylogger Yahoo


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: sonic303-47.consmr.mail.ne1.yahoo.com
Sending IP: 66.163.188.173
From: Bon Accord O S <bon.acccord@yahoo.com>
Subject: WE ARE INTERESTED IN YOUR PRODUCTS
Attachment: IMG_06037doc.img (contains "IMG_06037doc.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
109
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Iso_fs2061.UNOFFICIAL
Create hunting rule

PUA.Win.Trojan.Generic-6629274-0
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/845224c39304106cbee21ed234fd8614f4fd41a17f68031b4596c53cb15252d1/
Threat name:
ByteCode-MSIL.Trojan.Zmutzy
Create hunting rule
Status:
Malicious
First seen:
2021-02-15 06:53:07 UTC
AV detection:
9 of 46 (19.57%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=qrjcjq4taqigzpxcd3jdj7mgct2p2qnbp5uagg2fs3ctzmkskliq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/845224c39304106cbee21ed234fd8614f4fd41a17f68031b4596c53cb15252d1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

img 845224c39304106cbee21ed234fd8614f4fd41a17f68031b4596c53cb15252d1

(this sample)

SnakeKeylogger

Executable exe 237f8b4365da5b034b1f6a0f9761dc8f472670a48de278636ca4751475e6f750

  
Dropping
MD5 1f26db950119bea7aab49e349da50f53
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 237f8b4365da5b034b1f6a0f9761dc8f472670a48de278636ca4751475e6f750

Comments