General
-
Target
1176-65-0x0000000000400000-0x000000000042A000-memory.dmp
-
Size
168KB
-
MD5
77694578de75df4517fa7421bcf964c5
-
SHA1
fa9bf3124574e899f3f64514713f2ebef98d4958
-
SHA256
ecdeafafd00006c508523df87665e43662a91c9435c4a03e89be79fa4d303caf
-
SHA512
1e627204e808becbc8bae1b61166c9eeb88853670a946d818f2f460e5912cc5b8cc3f1dae39ef74edee8005b55d5057701db20005de79286b16039e941fe8268
-
SSDEEP
1536:TtMpEqKKbVaDU1dhoADnAwE/LKo1KPbKuzb/Yb0piO5BQy:TtMK5Kd1/fAwEybfz7YbefB7
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot5799835476:AAFiZfeIZu-7ZRuBqclPng8ud3yXZLUXpw8/sendMessage?chat_id=5666881718
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
StormKitty payload 1 IoCs
-
Stormkitty family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1176-65-0x0000000000400000-0x000000000042A000-memory.dmp
Headers
Sections