MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 935feb874c1b207a90f4683c697c85102cce85921208044c0ea92cb153ef37a4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


404Keylogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 935feb874c1b207a90f4683c697c85102cce85921208044c0ea92cb153ef37a4
SHA3-384 hash: 4082f9b6aadefbe8c625ece01c19de82f694de6785a43a541f6b9c7e856f9c51621401c087382c3e02e44fe08145fa28
SHA1 hash: ad812c17d2275ef6d28d4b8beba8baf3adbf359d
MD5 hash: 87b836f482d99cbee7f0eb98cc7ebaac
humanhash: pasta-pizza-oregon-beryllium
File name:Cotizacion.zip
Download: download sample
Signature 404Keylogger
Create hunting rule
File size:341'741 bytes
First seen:2020-10-08 12:28:36 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:UfoRpsPEOD69n2PaebFLBzMl+GNmn/89Lz2ubtzOnoaZrwI8IvSPE2ME:UfoR2DPaebFlzMbm/89n2mx6oRI8Nh
TLSH 5774235F66A82396B2E44FA4BBD0F89D2758D34724F2B640B9DB4F0019DAD8C7A785C0
Reporter abuse_ch
Tags:404Keylogger zip


Avatar
abuse_ch
Malspam distributing 404Keylogger:

HELO: segurosequinoccial.com
Sending IP: 45.153.242.51
From: ianzas_web1@segurosequinoccial.com
Subject: Cotizacion
Attachment: Cotizacion.zip (contains "cotizacion.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
97
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/935feb874c1b207a90f4683c697c85102cce85921208044c0ea92cb153ef37a4/
Threat name:
Win32.Trojan.LokiBot
Create hunting rule
Status:
Malicious
First seen:
2020-10-08 12:30:09 UTC
AV detection:
7 of 48 (14.58%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=snp6xb2mdmqhvehuna6gs7efcawm5bmscieaitaovewlcu7pg6sa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/935feb874c1b207a90f4683c697c85102cce85921208044c0ea92cb153ef37a4

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

404Keylogger

zip 935feb874c1b207a90f4683c697c85102cce85921208044c0ea92cb153ef37a4

(this sample)

404Keylogger

Executable exe 2ea762f225aa95bb3f31d08871b3e84358f48b1cbc4b67bf47b3d1c939a335b9

  
Dropping
MD5 ebaa6c8133bc97f822be7baa40ffc535
  
Dropping
404Keylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2ea762f225aa95bb3f31d08871b3e84358f48b1cbc4b67bf47b3d1c939a335b9

Comments