MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a5e118ecaa6bdea3688f797f5262b3f9d5433fc6d8ce71149faa257427260260. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a5e118ecaa6bdea3688f797f5262b3f9d5433fc6d8ce71149faa257427260260
SHA3-384 hash: 751c1f15d8200b6a6d3edd6be0fdaeab91830d8ae1b955568e54df979b23b97d07208a925bf0d973cb83dba645e6f617
SHA1 hash: 1c07142e5882f6eada46471ee1ea56b19377ddc8
MD5 hash: 8676925cb24e30d500ca8ec0628b550c
humanhash: aspen-nine-burger-april
File name:Our Order.img
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:1'638'400 bytes
First seen:2021-02-16 15:50:59 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:y5DMAzjN4YEAFC6gQ4pGp99yLi9xNtz4aLvj4l3SMmH:sZQLi9u0UlC7
TLSH 1975E12269AE4551CB7B0A3F041E52DAAFACF61778E8D3CCB00D12547B61D077BB163A
Reporter abuse_ch
Tags:img SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: sedlic.hr
Sending IP: 104.168.169.202
From: zvonimi<zvonimir@sedlic.hr>
Subject: YOUR PRODUCT.
Attachment: Our Order.img (contains "IMG_71307.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
112
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Iso_fs2061.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a5e118ecaa6bdea3688f797f5262b3f9d5433fc6d8ce71149faa257427260260/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2021-02-16 15:51:13 UTC
AV detection:
7 of 47 (14.89%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=uxqrr3fknppkg2eppf7veyvt7hkugp6g3dhhcfe7visxijzgajqa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/a5e118ecaa6bdea3688f797f5262b3f9d5433fc6d8ce71149faa257427260260

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

img a5e118ecaa6bdea3688f797f5262b3f9d5433fc6d8ce71149faa257427260260

(this sample)

SnakeKeylogger

Executable exe 87c4eaa0bd2c47960898cd39d92784c1aae78c2bd56562d1f67797eeab185f8e

  
Dropping
MD5 d1b5a492ef1db7226e935bbbee8350f9
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 87c4eaa0bd2c47960898cd39d92784c1aae78c2bd56562d1f67797eeab185f8e

Comments