snakekeylogger | 5acc114a1ca7775b1dc8b66273fbe4aac081f0457bd8b0ea809c548560deb7f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5acc114a1ca7775b1dc8b66273fbe4aac081f0457bd8b0ea809c548560deb7f8
Size

128KB
MD5

e3fa3dc4d941609b230f09187455d4ba
SHA1

a787bada0c9a2f2ebd4100d8727c69ed3e9cf0f9
SHA256

5acc114a1ca7775b1dc8b66273fbe4aac081f0457bd8b0ea809c548560deb7f8
SHA512

2a689f980f15d19965d1963896163a9d8d6b235700fcd07be9b3a60c0745803b63822c3d17710a626d67f98bd1f524c75708d5f9c3461d75fe51335d9932efbc
SSDEEP

3072:JWPqRkLYT35Ya29mdaM/9b8KRWmOwBcUbFbY:JCrnAx/9bPsUBb

Score

10^/10

snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

Protocol: smtp
Host:
minta-eg.com
Port:
587
Username:
[email protected]
Password:
admin@123

Signatures

Snake Keylogger payload 1 IoCs

resource	yara_rule
sample	family_snakekeylogger

Snakekeylogger family
snakekeylogger

Files

5acc114a1ca7775b1dc8b66273fbe4aac081f0457bd8b0ea809c548560deb7f8
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ