General

  • Target

    1804-71-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    6c426eaa535bd4c2886825400bcf47a4

  • SHA1

    03644ecb1f4f00b53a445548ecd585146af0fd98

  • SHA256

    b6ab2884fa75bcf2ec5dcf9350f200868373b1edc53356a1bc6beeab51919112

  • SHA512

    2d56fae1ba8f8ead3fc6d3239f8ae4d32f8c11a2acf4e145ac02df9690a91e95b2aea34fa52c6641b7b9ad1a97de4da2775e6129a558be1fbf99a328e247dbd8

  • SSDEEP

    1536:B5H8taABwPT7nqiJe5Y6F6hIMFDtWwdrb/UxXkiBbKqbVpiOWB8U:B5H8Y0QrqSe5Y6F6Qcrb8ee3PwB8U

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:
    smtp
  • Host:
    valleycountysar.org
  • Port:
    26
  • Username:
    [email protected]
  • Password:
    }eQA)VL2!$V}

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family

Files

  • 1804-71-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections