Extracted

Extracted

• • Target
    bd26bbf79c82f44d6017c89c2e273e78
  • Size 665KB
  • SHA256 965bfd08625987dd5a0dbc4a2e557a50971f42fdc93eb540fd0b64db39c4293e
  • MD5 bd26bbf79c82f44d6017c89c2e273e78
  • SHA1 7486ff2d6d689ed3d91769c178c3fc69046c264e
  • SHA512 006a05814c50329b8e55cb8f4749d9903940bc755cec827a0edd45d39286374641b720544fdd05a47308d7be21aa7a851bc0f46b55ca5e36a8583bc743a56a07
  • MD5 SHA1 SHA512

  Score

  10^/10

  snakekeyloggerkeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2