MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 d426666cec67a972fbacf58222713c9c0610848685cdb3b1aeebe8774efa61b2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
SnakeKeylogger
Vendor detections: 4
| SHA256 hash: | d426666cec67a972fbacf58222713c9c0610848685cdb3b1aeebe8774efa61b2 |
|---|---|
| SHA3-384 hash: | 85acec45e3f35629df5cd147a1838cd205eba4974f24cea9cad4de61c488b28f420dcf7c020bad6a7f0b999a3a07d9d6 |
| SHA1 hash: | ff74af5f2ecb4dd5135eaea8a07be84085c4d156 |
| MD5 hash: | c0316c45bfcc11df6618200575e318af |
| humanhash: | oscar-stairway-hot-rugby |
| File name: | customer Telex TransferTT.zip |
| Download: | download sample |
| Signature | SnakeKeylogger |
| File size: | 158'384 bytes |
| First seen: | 2021-01-30 12:59:01 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 3072:By7n8iGnq0M7lVDy+UDPGP5WO90igNpAByBDKX9nXOOENHArL9W+x9g5y2dePCCX:BASq0M7l5y+WGWLNayOOOENgrJW+EWJX |
| TLSH | 64F323983C940B1C7CB0977799D868988DC29A01555E98FDFC34B4E7FF4226E8CC6953 |
| Reporter |  abuse_ch |
| Tags: | SnakeKeylogger zip |
abuse_ch
Malspam distributing SnakeKeylogger:HELO: [172.93.187.39]
Sending IP: 172.93.187.39
From: Account payable <jrramirez@etiqa.com.ph>
Subject: Telex Transfer(TT).
Attachment: customer Telex TransferTT.zip (contains "customer Telex Transfer(TT).exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
233
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Zeus
Status:
Malicious
First seen:
2021-01-30 12:59:07 UTC
AV detection:
16 of 46 (34.78%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Dropping
SnakeKeylogger
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.