snakekeylogger | 33d644553ff1ccd20b5e6eae75c3093c[.]exe | Triage

Sharing

General

Target

33d644553ff1ccd20b5e6eae75c3093c.exe
Size

126KB
MD5

33d644553ff1ccd20b5e6eae75c3093c
SHA1

34205ce3316b642c9f8effcf0054c43ce24a0d04
SHA256

6937a633579dcfa1d12d93f4463d6c368d5a0140a3a540b4b05c5834db1810d5
SHA512

3be98948c5bea73ce8740a559d1fa5ffead87f8d071ef9943e71b980674e93ef0cebcae7a9ca76e8f236745f31db5b047825226dfce9ed45425018d9323da96e
SSDEEP

1536:Bl4ZAUsIqYJGxiJT3UutC9N5x2iPKbb/UzkjtLblpiOWB8SF0Kcl:Bl4Z7s0JGxiJT3EPMb8wJL7wB8SFbY

Score

10^/10

snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

Protocol: smtp
Host:
mail.prinutrition.com
Port:
587
Username:
[email protected]
Password:
Payment123@@
Email To:
[email protected]

Signatures

Snake Keylogger payload 1 IoCs

resource	yara_rule
sample	family_snakekeylogger

Snakekeylogger family
snakekeylogger

Files

33d644553ff1ccd20b5e6eae75c3093c.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ