MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ce34355f55e1c7456841c31878cc8e60e8f7e8a35fbb8935a891fca367727936. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ce34355f55e1c7456841c31878cc8e60e8f7e8a35fbb8935a891fca367727936
SHA3-384 hash: 898f1a998ea4da074077c307dfcef96924362ea28ab43523a07c34aa8a88e6240fb3f163d0a1a59db25a967d1b6b3979
SHA1 hash: f090c52679d3ec85576d3717a4ae9cef0a8faff9
MD5 hash: 36fa66587eb5a9ac7faf6b1057adea7a
humanhash: oranges-oscar-aspen-eighteen
File name:Revise Invoice.pdf.gz
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:299'701 bytes
First seen:2021-02-11 10:08:45 UTC
Last seen:Never
File type: gz
MIME type:application/gzip
ssdeep 6144:j48fUfX27YamKKDTSqGt7/IDkFa0/P5drsiF+91qOE:pNTRJGkFNn5drsiFgM7
TLSH D75423701B6623F508F36AA37B2945DC74A9C54F67F8626838DE0FD68EB048449FB4D8
Reporter abuse_ch
Tags:gz SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

From: "日本アイアール <s_a_l_e_s"@nar-corp.co.jp
Subject: Price Adjustment /shipments
Attachment: Revise Invoice.pdf.gz (contains "Revise Invoice.pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
99
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Artemis29B7796EFA09.13860.UNOFFICIAL
Create hunting rule

Result
Verdict:
UNKNOWN
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ce34355f55e1c7456841c31878cc8e60e8f7e8a35fbb8935a891fca367727936/
Threat name:
Win32.Trojan.XetimaLogger
Create hunting rule
Status:
Malicious
First seen:
2021-02-11 19:41:16 UTC
AV detection:
17 of 47 (36.17%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=zy2dkx2v4hduk2cbymmhrteomdupp2fdl65ysnnish6kgz3spe3a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

gz ce34355f55e1c7456841c31878cc8e60e8f7e8a35fbb8935a891fca367727936

(this sample)

SnakeKeylogger

Executable exe 090308227b82a631e99933cb1b744f0bb6e41b7c622099cb4582d32847b3f703

  
Dropping
MD5 29b7796efa09b2df5878094dd2bff07f
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 090308227b82a631e99933cb1b744f0bb6e41b7c622099cb4582d32847b3f703

Comments