General
-
Target
0f6b3fe6462e5437d78f9e31f36b9714.exe
-
Size
127KB
-
MD5
0f6b3fe6462e5437d78f9e31f36b9714
-
SHA1
60c5c8fbf39a9062bab0a0fe246cfca533b78291
-
SHA256
e853894bb59928160a6692647303507c4363ee5278758429ef2e6352f1b22a74
-
SHA512
78c6df0e81477590b20535667a243b09be9c40af17c2ddbcd5fc38d5a4a5e739f085ec7bf6ed1be76750d5e7fd5a5cf28b0847d7b6d1d8245840ad67cfa59e80
-
SSDEEP
1536:Y5pA2EO2Mf5ZbkikHTJOIT+ZVPz704MMFpYdKMLOLbKuQmlaCIkpiOWBJGF0Kcl:Y5pbE55zY704/aYbfaOwBsFbY
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
Credentials
Protocol: smtp- Host:
mail.mcmclinic.pt - Port:
587 - Username:
[email protected] - Password:
fgksA_t(iS1g - Email To:
[email protected]
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
StormKitty payload 1 IoCs
-
Stormkitty family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0f6b3fe6462e5437d78f9e31f36b9714.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections