MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e2eb06b75e10c47d3e01a095a27a6866b0b76b2658ec0f799b4bd83d21467b52. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e2eb06b75e10c47d3e01a095a27a6866b0b76b2658ec0f799b4bd83d21467b52
SHA3-384 hash: 013218abb073ca9c1e612c4ba898274d319e90beee869f8dad3fb4e0851b2bc669fdd2314d58fcdb82cb2442c489f006
SHA1 hash: 872d9679535cce5a21e3c39131e45a9697b02c88
MD5 hash: 3450d46170adac04e7ff0d8fd247c214
humanhash: freddie-tennis-mexico-lithium
File name:Purchase order.tar
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:1'054'720 bytes
First seen:2021-02-16 14:16:27 UTC
Last seen:Never
File type: tar
MIME type:application/x-tar
ssdeep 24576:W5QA4YI6Z7iYtU+wkxz5L3qOHWRLDZYdg4zmj:TM9Z7iYtdL6O2R/ZYdgkmj
TLSH 7425CF3267086B5DF039F33D402A191CABF5F84AE331DE5E7EDE86CA0429E059765623
Reporter abuse_ch
Tags:SnakeKeylogger tar


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: mail.etheshi.ml
Sending IP: 128.199.121.10
From: B.Vetrivel <rfq@etheshi.ml>
Subject: Purchase Order From Samyak Ltd
Attachment: Purchase order.tar (contains "Purchase order.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
102
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.PackedNET.543.5041.23278.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e2eb06b75e10c47d3e01a095a27a6866b0b76b2658ec0f799b4bd83d21467b52/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2021-02-16 14:17:06 UTC
AV detection:
11 of 47 (23.40%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=4lvqnn26cdch2pqbuck2e6tim2ylo2zgldwa66m3jpmd2ikgpnja._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/e2eb06b75e10c47d3e01a095a27a6866b0b76b2658ec0f799b4bd83d21467b52

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

tar e2eb06b75e10c47d3e01a095a27a6866b0b76b2658ec0f799b4bd83d21467b52

(this sample)

SnakeKeylogger

Executable exe 6ee61893309dd1379d78ad9b04f5c3c5a5b733af82bf64c3dfe28ff6f6d147be

  
Dropping
MD5 b58b012bee2e4a488994e8a01d754dd6
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 6ee61893309dd1379d78ad9b04f5c3c5a5b733af82bf64c3dfe28ff6f6d147be

Comments