MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 93364ebed3c7f70c83e1d379889b53f4f73a5ba92984560a6a4041810180ee89. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 93364ebed3c7f70c83e1d379889b53f4f73a5ba92984560a6a4041810180ee89
SHA3-384 hash: f7605d0ab65d317958b316c8d10f9b4fc14f569099431d97aefa24d378ec33fcd1e4abe0eebc07dd9eeaf6305afec562
SHA1 hash: 91658f0b6c14340e698d8d58c832faa34f645d01
MD5 hash: ac7a52c95ad3fce1c153ebe94d0968b0
humanhash: robert-london-solar-aspen
File name:IMG - 458765345678876545678998765434567-221987.IMG
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:1'245'184 bytes
First seen:2021-02-09 06:32:37 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:OaQ3zETCrdGuI/pONuGMkVIIy3fOsZt3Dgy1D8tb:lQ3oW5Oc8GMkcWsZtjD
TLSH 514513616260C0FBE6620F710A363A5BB6FEE50156740D03778CBBDCBF676D60D261A2
Reporter abuse_ch
Tags:img SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: wdki005.triple-interactive.nl
Sending IP: 37.48.87.138
From: cuentas <cuentas@wireroom.com>
Subject: Re: Confirmación de aviso de pago
Attachment: IMG - 458765345678876545678998765434567-221987.IMG (contains "IMG - 458765345678876545678998765434567-221987.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
96
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Iso_fs2061.UNOFFICIAL
Create hunting rule

PUA.Win.Downloader.Soft32downloader-6691270-0
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/93364ebed3c7f70c83e1d379889b53f4f73a5ba92984560a6a4041810180ee89/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2021-02-09 04:11:01 UTC
AV detection:
7 of 46 (15.22%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=sm3e5pwty73qza7b2n4yrg2t6t3tuw5jfgcfmctkibaycama52eq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/93364ebed3c7f70c83e1d379889b53f4f73a5ba92984560a6a4041810180ee89

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

img 93364ebed3c7f70c83e1d379889b53f4f73a5ba92984560a6a4041810180ee89

(this sample)

SnakeKeylogger

Executable exe 9f2a32bb6f4c076d372ff0f8244cb4428118b7ca482c9db5b3be1bd8991a8f68

  
Dropping
MD5 a324814e4c561ae3121a51f9de1a7a4f
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9f2a32bb6f4c076d372ff0f8244cb4428118b7ca482c9db5b3be1bd8991a8f68

Comments