General

  • Target

    1124-68-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    cc041f9df9aa763d9a312e1462ceff20

  • SHA1

    4ff34397c074cf6c96abbc10183ca736765b6d6f

  • SHA256

    bfe0fb5a60ea05bb0b78990a908a88dec34d7020df30ea9eb2662ae5a87fc98c

  • SHA512

    ba761e59caf816d8aa92b465e70f1e7087c33290babf03af78ff08e0b6fe6e16cf2519aed7870250b7bd559920bcd7a04deaf9c37a0e9a3d4a1155a48d1b2860

  • SSDEEP

    1536:wFlAi3bCo1sI4SSGP0NZu0eLTxJ41mVMAEe/QRJeiib/UiYtCvpiOWBl:wFlAi/s+PkZu0eLTm62Siib85tCBwBl

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot5474174071:AAHlV4cw4zvSgwgRjR7s8E5ZbyzghXny9w4/sendMessage?chat_id=6143595836

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1124-68-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections