Extracted

• • Target
    Stock requirment.jpg.exe
  • Size 1.4MB
  • SHA256 d952e6902baf966ee83e4036999827263a7132ca1dde7f4eab1797f9fbb75051
  • MD5 59206e19b8a4a425829d4c3a41566a0d
  • SHA1 f787a7262eec9f86dd755d250bf7bf633bc5bffd
  • SHA512 1cc0bd4f87d2fda03e53ec8aa7733052c35093d29214181e740c25493737912705eae1e63607147b2629d2ef4ab1f634489bb80997a37f6db6110a41f4a00303
  • MD5 SHA1 SHA512

  Score

  10^/10

  snakekeyloggercollectionkeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2