General
-
Target
50385.exe
-
Size
127KB
-
MD5
204f5399d94f31baf6ee8dd0c4d987c7
-
SHA1
b28d0a3491e5cf1d78f23caf1d11f5457badf993
-
SHA256
d78f467851bbce1a4982cd735418fc77347fd25928420d0e9c4f25f35c9ba1d0
-
SHA512
ff2c68d60d8cce487154b49275532adb72bdf22ca587ad2f6aa8cf92db696c47b2af8afc1895ee76f4bd934bc626b48b25e9b01471e6cb9971fee1f4210d7649
-
SSDEEP
1536:r6h0S9q8I52tKc5yCWgCvW4MFg6RjktwbKuif9nTT9dpiOWBSF0Kcl:r6h0Skd5gzWgCuK6t7bfKP9nwBSFbY
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
Credentials
Protocol: smtp- Host:
argona.ro - Port:
26 - Username:
[email protected] - Password:
Argona12!@ - Email To:
[email protected]
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
StormKitty payload 1 IoCs
-
Stormkitty family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
50385.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections