General

  • Target

    RFQ2022-7-5F3435.exe

  • Size

    135KB

  • MD5

    583fd649413705044c36439ffa27afe0

  • SHA1

    37ccdfbf77338199a059840827a0a0bfb31cc095

  • SHA256

    39169117bfbe15a6b58f91a5dd98809ba251cef0f103656ba9d2168baf9052e2

  • SHA512

    4bb4dd3ea197fa2dcfe153fe83b21141989fd90d6b377c480e4229540f079722ec5f32fb2549f527edc322400eaa2624e4ff5e40237b36472c11a28c771b1d30

  • SSDEEP

    3072:2XjqKBoJUjgt9hyN/k7G9me2cWum8ArexJUe8uaiwZRkGKo/+aL:2zfBVchyN/k7+NfWuAexJ5LaiEk

Malware Config

Signatures

  • Snake Keylogger Payload 1 IoCs
  • Snakekeylogger family
  • Warzonerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • RFQ2022-7-5F3435.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections