Overview

overview

10

Static

static

10

1252-62-0x...ry.exe

windows7-x64

1252-62-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1252-62-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    286b56079727569f58d6f9d7c3ba49d8

  • SHA1

    61524ce3dd455db537ca559b6f0f419ef3341923

  • SHA256

    d29be273b0a82ace762834f4c8718af2e1fed4ea3d278a09e6e4609b6828fd57

  • SHA512

    56ffc383a405f6d5f5b9f4135297d6a7d09555ef820d72fccc4e17cf13b4f2cae92f5407cd82f153605dc49c08ef2fcb2af11b3594604627d6299f6b5eeac492

  • SSDEEP

    1536:8Ww1/iDIVFFA9rhIxj6wN+vBUFrlYY7j9Iy3siULC6rfMFhv4arfdPY9b/z/wb+k:rw1/isBuIxj6W7jPPY9b7IKvhBvwBPN

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:     smtp
  • Host:
    mail.alhadafkw.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    ghazi123

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1252-62-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections