General

  • Target
    SecuriteInfo.com.Win32.CrypterX-gen.2848.13330.exe
  • Size 855KB
  • Sample221129-llgdhsfh87
  • SHA256 daf5d9181ae4291602cc0c77ed712ea3249ef3a8d461a0f14d1ea28960dfdc19
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      SecuriteInfo.com.Win32.CrypterX-gen.2848.13330.exe
    • Size 855KB
    • SHA256 daf5d9181ae4291602cc0c77ed712ea3249ef3a8d461a0f14d1ea28960dfdc19
    • MD5 SHA1 SHA512 SSDEEP
    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

    • Snake Keylogger payload

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks