Overview

overview

10

Static

static

10

528-64-0x0...ry.exe

windows7-x64

528-64-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    528-64-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    32ae780527d931e333dacdb5dcd868f4

  • SHA1

    bfabd26b9d32ff696d5d12cfcfaf9240b65aa9f1

  • SHA256

    5e99b9eb540c32b69a2e611732ad830c1d71e33b7d15b70699d823f2354b5a68

  • SHA512

    5ed04fa1e2154d5a369e5c14147f562e6a2d1ba59a2b6587efd129ecd72ab536cd35444ab3c425b8f4ee6c69671997b9c1e6f4d32e46025efc1fa5e6cf4da6fb

  • SSDEEP

    1536:itMpEvqHEIsan14rp7+YeIPyxPQMFLqBqhuCFWbKuTGvtSzEpiOWBWAF0Kcl:itMKHlrYYeIPyV9qkhGbfVzuwBWAFbY

Score
10/10
snakekeyloggerstormkitty

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6160036640:AAHqrAdmG4_GQkcLvxoups3k8WSEUC34w1g/sendMessage?chat_id=2052461776

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • StormKitty payload 1 IoCs
  • Stormkitty family
    stormkitty

Files

  • 528-64-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections