MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9085abde0721f2f03e9e9d2afb9054c3bbdc937c32b099ec798850641f760fda. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9085abde0721f2f03e9e9d2afb9054c3bbdc937c32b099ec798850641f760fda
SHA3-384 hash: a5606eb13130d4b389c817446f55f983d3e5b21ca032b74a072175948c742911bc78cfa308ea070a2184d506ad53d0c7
SHA1 hash: a05e77a76c9c89034c5eabbfbef9441f729a6bec
MD5 hash: a91bd8ada494e5a17ec95f86ed935893
humanhash: fillet-venus-magazine-lima
File name:INV_098789.rar
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:256'735 bytes
First seen:2021-01-20 13:52:59 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:GOQ4PuNFPdL8TESnaqNUEVCWCAnHm41sKNuPETG:VQ4GFCE2aB2C+vfNuPp
TLSH F34423A2D7FABBF9511BB007AE3370361AA2203BFD50156B001E5ADEC8557D5250FED2
Reporter abuse_ch
Tags:rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: howw.com
Sending IP: 180.214.237.140
From: "Allen Yu Fu Xiang" <info@howw.com>
Subject: Re: Payment Proof of Overdue Balance// INV#000185
Attachment: INV_098789.rar (contains "INV_098789.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
120
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9085abde0721f2f03e9e9d2afb9054c3bbdc937c32b099ec798850641f760fda/
Threat name:
ByteCode-MSIL.Infostealer.Maslog
Create hunting rule
Status:
Malicious
First seen:
2021-01-20 13:53:05 UTC
AV detection:
10 of 44 (22.73%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=scc2xxqhehzpapu6tuvpxecuyo55ze34gkyjt3dzrbigih3wb7na._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/9085abde0721f2f03e9e9d2afb9054c3bbdc937c32b099ec798850641f760fda

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

rar 9085abde0721f2f03e9e9d2afb9054c3bbdc937c32b099ec798850641f760fda

(this sample)

SnakeKeylogger

Executable exe d86b3acfe2d1e7d16c024f51e56bcba13b05390cea05f6b31e146d172bb2b082

  
Dropping
MD5 add006df937fd85501cc5722e9e23dc8
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d86b3acfe2d1e7d16c024f51e56bcba13b05390cea05f6b31e146d172bb2b082

Comments