General

  • Target

    1184-63-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    995b94072f9055db8ff0b494517f2a33

  • SHA1

    ca2afcecaf82d44b8b627a4af4f4e0c4158ec670

  • SHA256

    96e0361210a22918d3902f8c4b03153c10e82481d1f4d6af435d4d8a691e97dc

  • SHA512

    3cc1a678cdb54c0e608b010c79555d90015ac477d2de4a27793b6706961997bd74a4a8020df4d215e27cd8d85bcc2b1d7620412ca12e5739112770fa64393b41

  • SSDEEP

    1536:VhRqo7iytuRxTfUM+bZDg8ksxgGS2LHpskbbKunWvGk6piO5BN:VhRq/y5bhksQaHCObfW+ksfBN

Malware Config

Extracted

Family

snakekeylogger

Credentials

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1184-63-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections