MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f090a9ecdf495d5a312a909b7a2852fac0574c262e9a5da51f4b87b9b31dbfe1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f090a9ecdf495d5a312a909b7a2852fac0574c262e9a5da51f4b87b9b31dbfe1
SHA3-384 hash: ec3ad1e409b81aaab4daee33ae77c0ff68dc9317973ad9ce0c637456d5c527a909d4ab1ce183d07e0304a73c28bc7cc4
SHA1 hash: b6c19f6c34a2bd1f45ab0145b0384a27f212ffee
MD5 hash: 3b518a6c15ec0149de764afcd6bd0bd3
humanhash: purple-vegan-pluto-nevada
File name:20th DOC09000800000.7z
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:431'177 bytes
First seen:2020-12-21 07:38:17 UTC
Last seen:Never
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 12288:Hb2Yb3yyFAnEqfD04kncbBfrAmhQMlh8BRs01Hdd:7HVFZqrcwQMlh83dd
TLSH 0894231EBD769FBBDE89A73C2025B92DC2013C26D186AE1173D3275A5190A8CC7C49FD
Reporter abuse_ch
Tags:7z


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: hosted-by.rootlayer.net
Sending IP: 185.222.58.152
From: a.joyce@shipandshore.com.au
Subject: NEW ORDER
Attachment: 20th DOC09000800000.7z (contains "20th DOC09000800000.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
126
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.45095598.3789.18317.UNOFFICIAL
Create hunting rule

Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/f090a9ecdf495d5a312a909b7a2852fac0574c262e9a5da51f4b87b9b31dbfe1/
Threat name:
Win32.Trojan.Zenpak
Create hunting rule
Status:
Malicious
First seen:
2020-12-20 22:50:50 UTC
AV detection:
21 of 48 (43.75%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=6cikt3g7jfovumjkscnxukcs7lafotbgf2nf3ji7jod3tmy5x7qq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Trojan
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/f090a9ecdf495d5a312a909b7a2852fac0574c262e9a5da51f4b87b9b31dbfe1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

7z f090a9ecdf495d5a312a909b7a2852fac0574c262e9a5da51f4b87b9b31dbfe1

(this sample)

SnakeKeylogger

Executable exe 8c3f5afea73a61ecc6e171418e7099e336e8e5eeed9ed5bb3aaf104bc3bb53aa

  
Dropping
MD5 988b2f3728402c30fd9e17bae10f1566
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8c3f5afea73a61ecc6e171418e7099e336e8e5eeed9ed5bb3aaf104bc3bb53aa

Comments