MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b73ef9ba29c6c6bdba46614bcea04f0180ac5013a3e61d15e1f59903caed572b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b73ef9ba29c6c6bdba46614bcea04f0180ac5013a3e61d15e1f59903caed572b
SHA3-384 hash: dfbab87db6ade1860c5aec86dd05e10437ad63b484e1a035bf1b7756ac16528d509394f55e3a19a9c357af6eac063ef9
SHA1 hash: a5f0f3f9b02af15e5065ed2e609a48890446a621
MD5 hash: 60530e5980f10162c4655aaef9e17cb1
humanhash: hot-winner-carpet-stream
File name:IMG_33687.iso
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:2'228'224 bytes
First seen:2021-02-03 10:29:28 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 12288:lEsS8Ex1UrpJI8bgj7Yg2kExpzBhQZGCI0G1+1jZRtEmFAZCtEY8TK3mZUMkz6:ur8uWI8EjEg2XQGs1jZgmF1j3eUMkz
TLSH 5FA5D951BBF08705D674F3770DAAA21B1B9AFCE716E8819167190BB228924C05F4FBCD
Reporter abuse_ch
Tags:iso SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: slot0.novget.com
Sending IP: 192.236.146.161
From: Accounts <postmaster@novget.com>
Subject: FW: Outstanding Invoices
Attachment: IMG_33687.iso (contains "IMG_33687.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
115
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Iso_fs2061.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Trojan.Packed2.42829.13616.25544.UNOFFICIAL
Create hunting rule

PUA.Win.Trojan.Generic-6629274-0
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b73ef9ba29c6c6bdba46614bcea04f0180ac5013a3e61d15e1f59903caed572b/
Threat name:
Win32.Trojan.Zmutzy
Create hunting rule
Status:
Malicious
First seen:
2021-02-03 10:30:21 UTC
AV detection:
17 of 45 (37.78%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=w47ptorjy3dl3osgmff45icpagakyuatuptb2fpb6wmqhsxnk4vq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/b73ef9ba29c6c6bdba46614bcea04f0180ac5013a3e61d15e1f59903caed572b

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

iso b73ef9ba29c6c6bdba46614bcea04f0180ac5013a3e61d15e1f59903caed572b

(this sample)

SnakeKeylogger

Executable exe d8e19bae217a245b3eea0144a2e70ffc8b7a61944b2ae00077a0616694080097

  
Dropping
MD5 4e37d001d53117d028fa01eb27b48f18
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d8e19bae217a245b3eea0144a2e70ffc8b7a61944b2ae00077a0616694080097

Comments