General

  • Target

    1808-77-0x0000000000400000-0x00000000004E2000-memory.dmp

  • Size

    904KB

  • MD5

    c1f9b5f6a499351fe564dc871bcbb104

  • SHA1

    d223096de48aa71d08f8efee5eb2011716813851

  • SHA256

    37576631120c673c1dc3deb63d8cff8f2b43c7c0d93774e866d7f7f10f0a5924

  • SHA512

    49edd6925c17fdbfdeeac157ebf8fbbacceca6e3d6397ababa13c97503bd127d5aa5bdc2acb1f08e91e364a80d731aacecba326f3e6245a775dab79d98570d71

  • SSDEEP

    12288:sMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9FRpSn/4:snsJ39LyjbJkQFMhmC+6GD936/

Malware Config

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1808-77-0x0000000000400000-0x00000000004E2000-memory.dmp
    .exe windows x86


    Headers

    Sections