General

  • Target

    1652-69-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    b6a8ae9a44d20ac259719a85ffd4d11f

  • SHA1

    d31ef53c01d4fc2e73991865b9d06f818b46b803

  • SHA256

    b0a331b41f8561e2e5c3a623b37e0cd515475adf855f696ad40da6a94327fd56

  • SHA512

    186ec71ac89b33578e30f9084228c4b5b538bd65daf6d5abce1b7a1aa666d25d4b91e17edb882046d1e5aab4cda4a617250c38b2404b47fbc6f7e7e751e323e0

  • SSDEEP

    1536:qCABXAxoqrpAMuFbfFsXMFUuMgsQb/UH6ydCOZEZpiOWBKO:dABXghVtuFbfFAGb8akCbwBKO

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:
    smtp
  • Host:
    smtp.l3hharris.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    ^JHAkmP2
C2

https://api.telegram.org/bot5321252153:AAHwNVEU79VG8Xp_qHQFAA-RY-KD9_LWyNY/sendMessage?chat_id=5155333142

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family

Files

  • 1652-69-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections