MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9d21b004f46fe1ad705594236f8498ee36355d4a98569fa37e641f006be00810. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9d21b004f46fe1ad705594236f8498ee36355d4a98569fa37e641f006be00810
SHA3-384 hash: cec62f99e244b6be7f4b5c556f5fa8fd6ec2ee5c477d2b911d882c7b0c4aa60ffd1d0d319b4aaa8ef08edf13eba7ad6c
SHA1 hash: 62209b028b5f3206ac35b723c311014ecd5b0cdc
MD5 hash: db60a23bdb4ea16644dd1540dc820e3f
humanhash: three-avocado-undress-music
File name:Agent Statement CargoPro.zip
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:303'532 bytes
First seen:2021-01-30 13:00:37 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:d+RhL3Z6M6qYy39JKBTx70Iw8gAhtM3bUykxZAcGEa+RN7WW+pMxTM5BDxa:sRhbZ6Mn3KBlwIrVfEEa+XUrBla
TLSH 085423DDAF4B2945B8F20713972D280B0799DCA6F39B16F45E7622D2731A24686F483C
Reporter abuse_ch
Tags:SnakeKeylogger zip


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: air.nseasy.com
Sending IP: 64.37.52.73
From: CHARLENE YONG <sales@ricoeng.com.sg>
Subject: RE: 01/25/2021 Agent Statement
Attachment: Agent Statement CargoPro.zip (contains "Agent Statement CargoPro.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
224
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9d21b004f46fe1ad705594236f8498ee36355d4a98569fa37e641f006be00810/
Threat name:
ByteCode-MSIL.Trojan.Pwsx
Create hunting rule
Status:
Malicious
First seen:
2021-01-28 14:25:09 UTC
AV detection:
9 of 46 (19.57%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=tuq3abhun7q224cvsqrw7bey5y3dkxkktblj7i36mqpqa27abaia._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/9d21b004f46fe1ad705594236f8498ee36355d4a98569fa37e641f006be00810

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

zip 9d21b004f46fe1ad705594236f8498ee36355d4a98569fa37e641f006be00810

(this sample)

SnakeKeylogger

Executable exe a821247cfbed9095b7e7686eeca6572b9e506e080861c11c25be542f163a2500

  
Dropping
MD5 b4bce8a85b776b3aadb064547eaff482
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a821247cfbed9095b7e7686eeca6572b9e506e080861c11c25be542f163a2500

Comments