General

  • Target

    0c71ff77a7da50d45b2ac4bf4d977e4a.exe

  • Size

    126KB

  • MD5

    0c71ff77a7da50d45b2ac4bf4d977e4a

  • SHA1

    1fa368827f5420cf69f8ac291daf28ad10986ddf

  • SHA256

    bf704e0670a2ee267abbeb2463c006d1957070a66f1dd086d807ea69250a5ec5

  • SHA512

    fe0f672db021f91e139d9338fab35292d7eca6b85bec2cc26c88651e21be18cd83a3e3f4e6c42c1164080ba1c1d9d9dc3c679ba701df02cdc65fd2ab15313213

  • SSDEEP

    1536:htMpEvqHEIsanj0ly+G0/nE+vBUFrlY9DZKkAMFFxgfPpAbKuNJtbfpyJI0piOW0:htMKH7/tDZv2abfmJIewBnFbY

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6221660400:AAGb-WADrhdDFxd9kxzjtg3jdDw9-uvNVlM/sendMessage?chat_id=6200392710

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c71ff77a7da50d45b2ac4bf4d977e4a.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections