General
-
Target
1584-77-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
df82fa2ef7f1118980f43c065a09eacb
-
SHA1
eb79adef69944c0a62d042ed7d3ab73840809b57
-
SHA256
055c6f2b89ed3021dbdbed0d0616db8a7092aa3dd79801a18c1ef09bbf8ffcf6
-
SHA512
319b097d49469894862ba9f3cd4abf60c9651a1d41ae3b78e3a1110caa067c6c04386ae06f85fea126795a39dbc0fccec14533e2f053d3531f6dfd98f0199236
-
SSDEEP
1536:jb1zsSRlsSIKAPQ85Un3HrctjNeeDoBb/UJtGZb45QpiOWBC:jb1AKsDPQ85Un3HwmeUBb8nGZwBC
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
Credentials
Protocol: smtp- Host:
cp5ua.hyperhost.ua - Port:
587 - Username:
[email protected] - Password:
7213575aceACE@#$ - Email To:
[email protected]
C2
https://api.telegram.org/bot5321688653:AAEI2yqGrOA_-sRZ3xaqutrexraSgFa0AnA/sendMessage?chat_id=5048077662
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
Files
-
1584-77-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections