Extracted

• • Target
    Statement Of Accounts.PDF.exe
  • Size 648KB
  • SHA256 6010803fae462f5a1432a3c193ee4a00deac0c37dbbefec649201aad9824ef0d
  • MD5 ebe352b61274aa3fde064313d40b53ce
  • SHA1 85e57eb6351bfb33cee9307f2c7b83ba7f61fcf1
  • SHA512 56a72027eeb412c27985c78bd9630e844339c7551ff0f628c31c21946f9b7ff572472f41789caeefc715d684543f036776b9d4acfbaee7642433a6826dfa5bc5
  • MD5 SHA1 SHA512

  Score

  10^/10

  snakekeyloggercollectionkeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2