MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bd2c2cda3ea6f398323337b9feb6f5dd776389d6c59b63386e7c7b2e13188748. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: bd2c2cda3ea6f398323337b9feb6f5dd776389d6c59b63386e7c7b2e13188748
SHA3-384 hash: 82e62f56600670b8969a0b38872094931f3ce3e15d71d78c86409dae8fddc6e75f4a1d3ebe1d5b416eb2a2446286a0b8
SHA1 hash: 413e662d76b366aa9acfa9e1788a49f0f043208e
MD5 hash: ecdf6cbcb3949629546f9a43111038fb
humanhash: mountain-violet-foxtrot-march
File name:Order.rar
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:6'704 bytes
First seen:2021-02-16 13:55:56 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 192:JyHr0wxBvtKWFh0PikrBtQZV6GsEIKGbPr:BwxGWFq7Lm6GsUGbPr
TLSH 85D1AE938C454AB75A91CA7ED78BC3C163BEBBC89F42C850DD48E5718878CC06A4EB30
Reporter abuse_ch
Tags:rar SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: mail.good-hills.co.jp
Sending IP: 153.120.2.71
From: info@zindesut.com.tr
Subject: Satın Alma Order_20025227
Attachment: Order.rar (contains "Order.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
91
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/bd2c2cda3ea6f398323337b9feb6f5dd776389d6c59b63386e7c7b2e13188748/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2021-02-16 08:55:35 UTC
AV detection:
5 of 47 (10.64%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=xuwczwr6u3zzqmrtg6475nxv3v3whcowywnwgodopr5s4eyyq5ea._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Trojan
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/bd2c2cda3ea6f398323337b9feb6f5dd776389d6c59b63386e7c7b2e13188748

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

rar bd2c2cda3ea6f398323337b9feb6f5dd776389d6c59b63386e7c7b2e13188748

(this sample)

SnakeKeylogger

Executable exe aa1f92f9ec704b3f621775a4d4e5729e7fe710b84ab60eda7ff60fe869385fe3

  
Dropping
MD5 da71d7308dfe815950188723a1d0b45a
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 aa1f92f9ec704b3f621775a4d4e5729e7fe710b84ab60eda7ff60fe869385fe3

Comments