MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 91dd06629dc59bd27bf10b253e4c7b5b12b0bf2809eb39fcc4faf18540cc8b19. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 91dd06629dc59bd27bf10b253e4c7b5b12b0bf2809eb39fcc4faf18540cc8b19
SHA3-384 hash: 21db77906cb10f2d712528c099836ac4ac85f04f73f20e3f1e4bee3ef4e8af680913be26a64d0291385c84e19bc84853
SHA1 hash: 19c2b600b630bbb0202ac4389f568ca2e14bb2c7
MD5 hash: 3be9c16df360ee43d02ca30b983ef511
humanhash: echo-winner-batman-glucose
File name:Dringende RFQ_AP75887658_98788,pdf.iso
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:995'328 bytes
First seen:2021-04-07 10:20:24 UTC
Last seen:2021-04-07 11:24:51 UTC
File type: iso
MIME type:application/x-iso9660-image
ssdeep 24576:9PtmaCJaLNYfhBGZ5IgOl+2LwhhFZRvDuW3Ad:9PtmQLKJBG3o+2LwBZ0B
TLSH 9625AD3822F4AB51D439023223E1D0245AF1AF6CDEE5D30AFDB829C5B752DD82E9561F
Reporter lowmal3
Tags:SnakeKeylogger

Intelligence

File Origin
# of uploads :
2
# of downloads :
110
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Iso_badexts72.UNOFFICIAL
Create hunting rule

Win.Trojan.Mikey-9839945-0
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/91dd06629dc59bd27bf10b253e4c7b5b12b0bf2809eb39fcc4faf18540cc8b19/
Threat name:
Win32.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2021-04-07 10:21:05 UTC
File Type:
Binary (Archive)
Extracted files:
31
AV detection:
14 of 28 (50.00%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=shoqmyu5ywn5e67rbmst4td3lmjlbpzibhvtt7ge7lyykqgmrmmq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/91dd06629dc59bd27bf10b253e4c7b5b12b0bf2809eb39fcc4faf18540cc8b19

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

iso 91dd06629dc59bd27bf10b253e4c7b5b12b0bf2809eb39fcc4faf18540cc8b19

(this sample)

SnakeKeylogger

Executable exe 27e1e7ded2f85e28d24c402e3add4b2c9c49bac8b75a0f0900239054edb4886b

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 27e1e7ded2f85e28d24c402e3add4b2c9c49bac8b75a0f0900239054edb4886b
  
Dropping
MD5 d507ea58a61693ce50e68240765f3057

Comments