Extracted

• • Target
    Kopie dokladu o transakci 09_14_21.exe
  • Size 767KB
  • SHA256 9dc3572c8d6db7ca7c115ecb9a3b60a41357c68e40f69088450e66dee57a9c4c
  • MD5 982e73a26f857bd17efcbcea864c9b5d
  • SHA1 fa365ebb363c8722b93f37c8a4ed82d5f8371a56
  • SHA512 b3b0cb7c60b191c764a49de1490571366dd8eba6c6a6cc2563075699353ed255236672266eea4c8d0d6901a019bf05c0a65f572adce68ea1dcfddf120486c2f4
  • MD5 SHA1 SHA512

  Score

  10^/10

  snakekeyloggerkeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2