MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e427d1bb1bd411677b680ec5414b2b778f3eb3963b3f51bbfa9d1009e6fbe672. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e427d1bb1bd411677b680ec5414b2b778f3eb3963b3f51bbfa9d1009e6fbe672
SHA3-384 hash: 73e10429ea2424590abaf2a7aa2a1b9d292db315254ec1c2ff19b9913ef9a1f98d8d00c33ace8cb11f9c24185e43d0c2
SHA1 hash: 65dd70fc7a17109921a6bf64040011937005aaac
MD5 hash: 438fd6dbab8d1248eb8a36e91003bb6f
humanhash: bacon-missouri-lion-winter
File name:Yeni siparis _WJO-001, pdf.iso
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:1'097'728 bytes
First seen:2021-04-07 06:34:20 UTC
Last seen:2021-04-07 11:18:54 UTC
File type: iso
MIME type:application/x-iso9660-image
ssdeep 24576:w3bOx1cDn3DmS6pUb4aoaJ3IkPNYX3YGJuvHUzvvCOOReYycnlWp:Nx1Wn3DmvpI4aoaDPi3pJ9v7
TLSH A235E02232989B96F17E5B329465913013F1B84FE376D24E3CDCA39C16B2BC1C25A776
Reporter lowmal3
Tags:SnakeKeylogger

Intelligence

File Origin
# of uploads :
3
# of downloads :
99
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Iso_badexts66.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e427d1bb1bd411677b680ec5414b2b778f3eb3963b3f51bbfa9d1009e6fbe672/
Threat name:
Script.Trojan.Phonzy
Create hunting rule
Status:
Malicious
First seen:
2021-04-07 06:35:06 UTC
AV detection:
5 of 48 (10.42%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=4qt5doy32qiwo63ib3cucszlo6ht5m4whm7vdo72tuiatzx34zza._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/e427d1bb1bd411677b680ec5414b2b778f3eb3963b3f51bbfa9d1009e6fbe672

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

iso e427d1bb1bd411677b680ec5414b2b778f3eb3963b3f51bbfa9d1009e6fbe672

(this sample)

SnakeKeylogger

Executable exe 9d92710a161bdf3bbf19a895ad3f7ee347d283890bd2a40893f3bb6d85b3077c

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9d92710a161bdf3bbf19a895ad3f7ee347d283890bd2a40893f3bb6d85b3077c
  
Dropping
MD5 a80422c14d9020fac56a564a890e9989

Comments