General
- Target 05.24.2022 Dönemi MEVDUAT Ekstre Bilgileri.exe
- Size 877KB
- Sample220524-p4l89sbbb8
- SHA256 cf8daae97e0ecfe042272db8fa81d13bd014a6e34047ae97fdfcd7719bac2c8c
- MD5 5be553ab6c7bf8a7cd425f0fb208e359
- SHA1 af6d08f77c43d2e231ffedeed41a3cc82a747389
- SHA512 335e4c334c6c1cfc29de4915004421146d5db2e0e683b696f4c170173249106701989e78a0f05cad791fc789005bd5d0a5be15d3352fad05963c6b5e1c5dfca5
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
05.24.2022 Dönemi MEVDUAT Ekstre Bilgileri.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
05.24.2022 Dönemi MEVDUAT Ekstre Bilgileri.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
snakekeylogger
C2
-
https://api.telegram.org/bot5273407003:AAG7ZG43PS1FZDrj0gADw0sr_lYis0K5EYU/sendMessage?chat_id=2028572980
Targets
-
- Target 05.24.2022 Dönemi MEVDUAT Ekstre Bilgileri.exe
- Size 877KB
- SHA256 cf8daae97e0ecfe042272db8fa81d13bd014a6e34047ae97fdfcd7719bac2c8c
- MD5 5be553ab6c7bf8a7cd425f0fb208e359
- SHA1 af6d08f77c43d2e231ffedeed41a3cc82a747389
- SHA512 335e4c334c6c1cfc29de4915004421146d5db2e0e683b696f4c170173249106701989e78a0f05cad791fc789005bd5d0a5be15d3352fad05963c6b5e1c5dfca5
- MD5 SHA1 SHA512
Score10/10-
Snake Keylogger Payload
-
Suspicious use of SetThreadContext