MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fcf82234d4d38af5aa1eecc5a457039f2b82cf599540fb66a4de2419f911e632. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


SnakeKeylogger


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fcf82234d4d38af5aa1eecc5a457039f2b82cf599540fb66a4de2419f911e632
SHA3-384 hash: c895fd4e9b57b258a485b144880e5a7ea0257abdbd345c6846ff6ebe5875e5add7e6640088ef8985a45bb65f9e1f3d99
SHA1 hash: 83757a89735f35f05a697cdf77c5a360d4c9133b
MD5 hash: 344af30b294aba6514674bb4e206553d
humanhash: jig-west-lemon-lithium
File name:IMG_5368437937.7z
Download: download sample
Signature SnakeKeylogger
Create hunting rule
File size:310'644 bytes
First seen:2021-02-11 07:11:32 UTC
Last seen:Never
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 6144:fIo1dAL2oGtyaCE5L+jE1bsP0NIMYqxARwaanRpKCqT:7dyMd650KPqxAqRvqT
TLSH A16423188E24F5DEED4270637AF85BDB2671A145BC3C2A38875D86083146EE5DFE392C
Reporter abuse_ch
Tags:7z SnakeKeylogger


Avatar
abuse_ch
Malspam distributing SnakeKeylogger:

HELO: webmail.sap-express.com
Sending IP: 103.31.134.140
From: Sales Manager <mirani@sap-express.com>
Subject: RFQ#AVAILABILITY OF GOODS
Attachment: IMG_5368437937.7z (contains "IMG_5368437937.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
104
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Inject4.6572.11530.4365.UNOFFICIAL
Create hunting rule

Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/fcf82234d4d38af5aa1eecc5a457039f2b82cf599540fb66a4de2419f911e632/
Threat name:
Win32.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2021-02-11 22:40:15 UTC
AV detection:
18 of 47 (38.30%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=7t4cengu2ofplkq65tc2ivydt4vyft2zsvapwzve3ysbt6ir4yza._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/fcf82234d4d38af5aa1eecc5a457039f2b82cf599540fb66a4de2419f911e632

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

SnakeKeylogger

7z fcf82234d4d38af5aa1eecc5a457039f2b82cf599540fb66a4de2419f911e632

(this sample)

SnakeKeylogger

Executable exe 8a1690fccff3d97874f1d71d344f99ca14b7e91b8c2acc84d6fbc28c2cc489eb

  
Dropping
MD5 1d48a61a8c4a95a22d761f53cc07cc2f
  
Dropping
SnakeKeylogger
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8a1690fccff3d97874f1d71d344f99ca14b7e91b8c2acc84d6fbc28c2cc489eb

Comments