snakekeylogger | 64a11ae8390f71fafac5758e604f7dd810bc08599d7409b78ed8dbc0d800889b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64a11ae8390f71fafac5758e604f7dd810bc08599d7409b78ed8dbc0d800889b
Size

128KB
MD5

0bd8a3ac0668bb31b2d27e96463228fd
SHA1

9003025399b49b45c55101d0ad2431c7dd6c8e19
SHA256

64a11ae8390f71fafac5758e604f7dd810bc08599d7409b78ed8dbc0d800889b
SHA512

5e5e2671ddbf3363abbc9536d62c480b8ce3162f64fca597b5dc0ea1a6598c9a610bd3fd11681f5f39c059cbb7d4d7b2122bab1b985083fdfc3dba5ecc791b87
SSDEEP

3072:NYbcQrRkR3r3xQ09pd/bb8p3mwBQUwFbY:dQF85dbnUEb

Score

10^/10

snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

Protocol: smtp
Host:
cp5ua.hyperhost.ua
Port:
587
Username:
[email protected]
Password:
7213575aceACE@#$
Email To:
[email protected]

Signatures

Snake Keylogger payload 1 IoCs

resource	yara_rule
sample	family_snakekeylogger

Snakekeylogger family
snakekeylogger

Files

64a11ae8390f71fafac5758e604f7dd810bc08599d7409b78ed8dbc0d800889b
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ