Trojan

Trojan:Win32/SnakeKeyLogger!pz (file analysis)

Malware Removal

The Trojan:Win32/SnakeKeyLogger!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/SnakeKeyLogger!pz virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/SnakeKeyLogger!pz?


File Info:

name: ABDF62294F43012D06F0.mlw
path: /opt/CAPEv2/storage/binaries/a85714517ba38e6bfde7697befc74ce1e12778a1add0b1bc8e7f16e2b39445e8
crc32: 15986CC2
md5: abdf62294f43012d06f06aac504bfe36
sha1: 4771512aa91892921394e3738e3a3e52f13d9951
sha256: a85714517ba38e6bfde7697befc74ce1e12778a1add0b1bc8e7f16e2b39445e8
sha512: a32efbf86b22d9c42731fe10b76417fdccc7d5357b4cc0f37db99d9cb623f4a0641304e916c5d5008a44d4ae4c55ea61dd34f6b1f4b59e692e5fe4cb628010ca
ssdeep: 24576:KTCZKf8t5DX6qSPe9V4ZaVEcbegkUl457v2GEbOVfBkQt5QqV4ah36m6HbyMkzp5:Uf8mOyNb2GLCQVV4eKtMthUzLVK/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18EB59C72A45A9EE5F6A23138717F0C4260A59436232F38F76B6B7C0696CF4DD10FC19A
sha3_384: ac0a21a1225c16ff2d72b3d83f5a70baa19be8bc1738383a58f8124770b1ce8f9a86264bf86b04286c7d0f20c29fcba8
ep_bytes: e9512a2300e98a2a2300e9dc332300e9
timestamp: 2023-02-12 12:11:48

Version Info:

0: [No Data]

Trojan:Win32/SnakeKeyLogger!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.ShellCode.4!c
MicroWorld-eScanDeepScan:Generic.ShellCode.RDI.Marte.4.1DCCAE69
SkyhighArtemis!Trojan
McAfeeArtemis!ABDF62294F43
MalwarebytesMachineLearning/Anomalous.94%
VIPREDeepScan:Generic.ShellCode.RDI.Marte.4.1DCCAE69
SangforTrojan.Win32.Zenpak.Vnaj
AlibabaTrojan:Win32/Zenpak.af9ad8c1
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitDeepScan:Generic.ShellCode.RDI.Marte.4.1DCCAE69
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
APEXMalicious
KasperskyHEUR:Trojan.Win32.Zenpak.gen
BitDefenderDeepScan:Generic.ShellCode.RDI.Marte.4.1DCCAE69
AvastWin32:Malware-gen
RisingTrojan.Generic@AI.100 (RDML:Pf7EEUBCOLSN0KJtOM3OrA)
EmsisoftDeepScan:Generic.ShellCode.RDI.Marte.4.1DCCAE69 (B)
F-SecureTrojan.TR/Zenpak.enmvf
ZillyaTrojan.Zenpak.Win32.12888
TrendMicroTrojan.Win32.SHELLCODE.VSNTCR23
SophosMal/Generic-S
IkarusTrojan.Win32.Krypt
AviraTR/Zenpak.enmvf
Antiy-AVLTrojan/Win32.Zenpak
MicrosoftTrojan:Win32/SnakeKeyLogger!pz
ZoneAlarmHEUR:Trojan.Win32.Zenpak.gen
GDataDeepScan:Generic.ShellCode.RDI.Marte.4.1DCCAE69
GoogleDetected
VBA32BScope.Trojan.Win64.Shelma
ALYacDeepScan:Generic.ShellCode.RDI.Marte.4.1DCCAE69
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTrojan.Win32.SHELLCODE.VSNTCR23
TencentMalware.Win32.Gencirc.10bf5fda
SentinelOneStatic AI – Suspicious PE
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
DeepInstinctMALICIOUS

How to remove Trojan:Win32/SnakeKeyLogger!pz?

Trojan:Win32/SnakeKeyLogger!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment