MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a8428a0d44d4b365a53523ee05336a0f23db2b1f99166ec825314d3ab9132b78. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a8428a0d44d4b365a53523ee05336a0f23db2b1f99166ec825314d3ab9132b78
SHA3-384 hash: 2f77398e4d312485b8ec6705defcea890e211501940188db0dad42f9b2697e2d94c4b1b790b2e90ab14b1aa02f76b055
SHA1 hash: d20766ecdc57a2c11c87918e9611ceb2be82174b
MD5 hash: afc196606e3cd955d6bae54a3b737bb6
humanhash: comet-autumn-uncle-nevada
File name:GstInvoice-Jan-2021-xxxxxxx0006.zip
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:751'204 bytes
First seen:2021-02-16 14:12:07 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:xhKLS7VGDVdiEiH8kkWi2Nk4eCOCbmnn6lwcntynLgP/BxDZLZ6BOM+iQv+WX8Fp:HpkdWeinezn6pntPpxxABOMLQmWw
TLSH E9F433D761A692E1A7F1739CE238343D8CB5EB88CE44CB52FB187E18716699470E14EC
Reporter abuse_ch
Tags:MailChannels SnakeKeylogger zip


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: snail.cherry.relay.mailchannels.net
Sending IP: 23.83.223.170
From: ICICI Bank <gstinvoice@icicibank.com>
Subject: GST Invoice For the Month of Jan - 2021 for XXXXXXXX0006
Attachment: GstInvoice-Jan-2021-xxxxxxx0006.zip (contains "GstInvoice-Jan-2021-xxxxxxx0006.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
118
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Zip_fn25.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a8428a0d44d4b365a53523ee05336a0f23db2b1f99166ec825314d3ab9132b78/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2021-02-16 14:13:05 UTC
AV detection:
12 of 47 (25.53%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=vbbiudke2szwljjvepxakm3kb4r5wky7telg5sbfgfgtvoitfn4a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/a8428a0d44d4b365a53523ee05336a0f23db2b1f99166ec825314d3ab9132b78

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

zip a8428a0d44d4b365a53523ee05336a0f23db2b1f99166ec825314d3ab9132b78

(this sample)

SnakeKeylogger

Executable exe e8de71e3b5cfef776bb7435eea6535a455f3b2cb978a24f11b3f78bbe9e6a3e9

  
Dropping
MD5 6c791407d6c0b7adfdaea4ddf0430dd8
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e8de71e3b5cfef776bb7435eea6535a455f3b2cb978a24f11b3f78bbe9e6a3e9

Comments