General
-
Target
1704-64-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
3e7fabeea6710eedde96e33398de35c3
-
SHA1
815ba59a019ce1b1429bb3fc878c0e2442baff98
-
SHA256
1092b1133c792f1a60309e29c6e25584002e40d4ec4b697d29404eb7794b7191
-
SHA512
216c1d317b2ac06d4447f5d242507efc7d9e88a44a16b68e1cb0f605b85dd8ca4c8b29ed14d14f3e1bdaf4fe88a3a55b5b5490a8d324fed3e6f9e5d895fd7b25
-
SSDEEP
3072:mQE96U0PIseZqQjT3HZ/s/b8FfSwBMkQbY:xU0Pgz5/obb1b
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
Credentials
Protocol: smtp- Host:
mail.offlermarine.com - Port:
587 - Username:
[email protected] - Password:
LenTalbot6182) - Email To:
[email protected]
C2
https://api.telegram.org/bot5752513408:AAEZM5NWCrijmxmDFsYpCBVCbC14s-JJOXg/sendMessage?chat_id=5064120322
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
Files
-
1704-64-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections