General
-
Target
SecuriteInfo.com.Win32.CrypterX-gen.7551.3420.exe
-
Size
845KB
-
Sample
221129-p2cl2saf29
-
MD5
ddf19dfc9d16d9ac8f984a593cc05eed
-
SHA1
276790704c1ef49a3c38726e8a17b6b6bc1143d9
-
SHA256
50d20d3369c59197a90bbcdc2c8683ac140abb13e20cafb8c93af99c410b1d32
-
SHA512
4c189110a4006aa7a1219d6c26d4ce29e11fd1f2cf9e5f30e2930a2c03525a137ddbf5f384f97cb616a63a25106f3521ef95452949d91b4ee54b295fde9a0f58
-
SSDEEP
12288:tfQqU+oatuR4TWlyxltFknO10rzpVCrIL0XWMZD5Tm73Ddzoa1cfN:FI4uuTW2XFkO1OzpIrM0PZdKLDdEPf
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.CrypterX-gen.7551.3420.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.CrypterX-gen.7551.3420.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
SecuriteInfo.com.Win32.CrypterX-gen.7551.3420.exe
-
Size
845KB
-
MD5
ddf19dfc9d16d9ac8f984a593cc05eed
-
SHA1
276790704c1ef49a3c38726e8a17b6b6bc1143d9
-
SHA256
50d20d3369c59197a90bbcdc2c8683ac140abb13e20cafb8c93af99c410b1d32
-
SHA512
4c189110a4006aa7a1219d6c26d4ce29e11fd1f2cf9e5f30e2930a2c03525a137ddbf5f384f97cb616a63a25106f3521ef95452949d91b4ee54b295fde9a0f58
-
SSDEEP
12288:tfQqU+oatuR4TWlyxltFknO10rzpVCrIL0XWMZD5Tm73Ddzoa1cfN:FI4uuTW2XFkO1OzpIrM0PZdKLDdEPf
Score10/10-
Snake Keylogger payload
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-