MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9f01af40a62a0b27d64c75f00fe8f8075ccc7ea961d71954be9e7449cb3d85d9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9f01af40a62a0b27d64c75f00fe8f8075ccc7ea961d71954be9e7449cb3d85d9
SHA3-384 hash: eabb6c7733c12fa22288716eea5459081a19b7be73c946eec58524262ed0cc5a0a08a0ea89621324d446225cf7d69747
SHA1 hash: 3bffe92e2815b0898669b1c723ef1099f4d37144
MD5 hash: 3d631f78b1cd72b0aa750b305f6e65e7
humanhash: speaker-april-romeo-quiet
File name:IMG_25579.img
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:2'097'152 bytes
First seen:2021-01-20 06:31:38 UTC
Last seen:2021-01-20 20:58:20 UTC
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:o50jwcEc6tcJHuDvjCBS9obwfHIAeqaZxYc:U08cEc6tck6SqUfHLeqa/Y
TLSH 54A5AE0691164153E9683D7A846F2F844780ABBE3892D387BC0D7763FB52FCC66864F9
Reporter abuse_ch
Tags:img SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: totalgcc.com
Sending IP: 185.222.58.142
From: links@totalgcc.com
Subject: NEW INQUIRY, UL LISTED-----
Attachment: IMG_25579.img (contains "IMG_25579.pdf.exe")

Intelligence

File Origin
# of uploads :
2
# of downloads :
149
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Iso_fs2061.UNOFFICIAL
Create hunting rule

PUA.Win.Trojan.Generic-6629274-0
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/9f01af40a62a0b27d64c75f00fe8f8075ccc7ea961d71954be9e7449cb3d85d9/
Threat name:
Win32.Trojan.Zmutzy
Create hunting rule
Status:
Malicious
First seen:
2021-01-20 04:24:59 UTC
AV detection:
7 of 45 (15.56%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=t4a26qfgfifspvsmoxya72hya5omy7vjmhlrsvf6tz2etsz5qxmq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/9f01af40a62a0b27d64c75f00fe8f8075ccc7ea961d71954be9e7449cb3d85d9

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

img 9f01af40a62a0b27d64c75f00fe8f8075ccc7ea961d71954be9e7449cb3d85d9

(this sample)

SnakeKeylogger

Executable exe b1c89b167239238aea8a718d40751a1233ab4b9479b19e6feb86ed5a4c9aec20

  
Dropping
MD5 5ab98f94682ec463f48cada8b9811055
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b1c89b167239238aea8a718d40751a1233ab4b9479b19e6feb86ed5a4c9aec20

Comments