General

  • Target
    05.24.2022 Dönemi MEVDUAT Ekstre Bilgileri.exe
  • Size 877KB
  • Sample220524-p4l89sbbb8
  • SHA256 cf8daae97e0ecfe042272db8fa81d13bd014a6e34047ae97fdfcd7719bac2c8c
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • snakekeylogger

C2
  • https://api.telegram.org/bot5273407003:AAG7ZG43PS1FZDrj0gADw0sr_lYis0K5EYU/sendMessage?chat_id=2028572980

Targets

    • Target
      05.24.2022 Dönemi MEVDUAT Ekstre Bilgileri.exe
    • Size 877KB
    • SHA256 cf8daae97e0ecfe042272db8fa81d13bd014a6e34047ae97fdfcd7719bac2c8c
    • MD5 SHA1 SHA512
    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

    • Snake Keylogger Payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks