Overview

overview

10

Static

static

10

1216-63-0x...ry.exe

windows7-x64

1

1216-63-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1216-63-0x0000000000400000-0x000000000045C000-memory.dmp

  • Size

    368KB

  • MD5

    5ade27102efdc524e7af0c818249cc08

  • SHA1

    23abfdb4824605e9d40695c42726ae32b157cbf5

  • SHA256

    bc98432a292ff0c6a7ac0eb339632edbb5f449d2d5a3aba17e9df436e3c5c65e

  • SHA512

    04dac4bf45ed0757ac0a65052d529903a13043bfc7270e983376c52f66e18784902265258d8ff1d20a532da55555d8eefd942a105a015b5f3e7e32ea87bf2236

  • SSDEEP

    3072:5YJdX7NwPDhOMRsd4+RHIFb8kCSOLWWwBI2:irNlLdRhIFbpOV2

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:     smtp
  • Host:
    mail.linda-ks.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    ErzaLinda2020./
C2

https://api.telegram.org/bot5634627589:AAFwx4pQ8MD3ucRRs1LDHawKlR98KkWR2qM/sendMessage?chat_id=5798274961

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger

Files

  • 1216-63-0x0000000000400000-0x000000000045C000-memory.dmp
    .exe windows x86


    Headers

    Sections