Extracted

• • Target
    be7e692adb6ddc9a95f4c7e98c4cfd1fa5a7638b91d8fa93b39db027f0f4e60b.exe
  • Size 127KB
  • SHA256 be7e692adb6ddc9a95f4c7e98c4cfd1fa5a7638b91d8fa93b39db027f0f4e60b
  • MD5 93457c22f23698ae2541ee2162aca0e6
  • SHA1 13bfcd1c4ed7ad871b8fa1bd3a3082eaf8b5556f
  • SHA512 5d01ef0883d6f8d1c6031dfceb0c5ad9373c1975dc370d4d22749b9d1b27468db8b0a7e8761fe199ef39eb2872767fdb2b7993077d1c7a284625c3fb7eed4e9e
  • SSDEEP 3072:fJ38h0B/+aOKbU4Jb8IUG7AcwBI8yFbY:aqK2UMbokh8Wb
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  snakekeyloggercollectionkeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2