MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d8b0b247c39732c2ca8066d862a9a537b9c47d704331718dc82fc22ed44e2c33. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d8b0b247c39732c2ca8066d862a9a537b9c47d704331718dc82fc22ed44e2c33
SHA3-384 hash: 6639053632a36a79c7850c3d45c2c8a978809bc61abd054fdbbc31941cfb119c7f7cae162613f1b8c74644240d1cc3da
SHA1 hash: 794af3e0f65fae786eb8cb8d0312120030ded7e8
MD5 hash: 4da2f709b077586d071df172076c4d1f
humanhash: echo-pasta-zebra-missouri
File name:Selected New Order.rar
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:948'684 bytes
First seen:2021-02-22 06:41:51 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:IorVNeRDQ68AfvHdYjj2b/VRNEq1XgBREXyFId:Io/eRaAdMjGPNEqiREXyFId
TLSH F6153346C2223FE00B50EDCD48DB69E85400C7516D7EEA056F4EE57698D28B79FE2C3A
Reporter abuse_ch
Tags:rar SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: sina.com
Sending IP: 45.15.143.251
From: Huzaifa Lee <tmdwjs@sina.com>
Reply-To: Huzaifa Lee <huzaifa.hitechinternational@gmail.com>
Subject: Website- Selection of new order
Attachment: Selected New Order.rar (contains "Selected New Order.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
93
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Mal.DrodRar-AIC.2747.10967.UNOFFICIAL
Create hunting rule

Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d8b0b247c39732c2ca8066d862a9a537b9c47d704331718dc82fc22ed44e2c33/
Threat name:
ByteCode-MSIL.Trojan.Pwsx
Create hunting rule
Status:
Malicious
First seen:
2021-02-22 06:42:11 UTC
AV detection:
12 of 47 (25.53%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=3cyler6ds4zmfsuam3mgfknfg644i7lqimyxddoif7bc5vcofqzq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

rar d8b0b247c39732c2ca8066d862a9a537b9c47d704331718dc82fc22ed44e2c33

(this sample)

SnakeKeylogger

Executable exe f09c19d69898ea4c2521f697ea6927f3760887df99fba0662c68bc9fa1691a8a

  
Dropping
MD5 5e4bc1312d451fb767e5bfbb79dcb0c2
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f09c19d69898ea4c2521f697ea6927f3760887df99fba0662c68bc9fa1691a8a

Comments