General

  • Target

    1112-75-0x0000000140000000-0x0000000140024000-memory.dmp

  • Size

    144KB

  • MD5

    3aec2cf85b8e69bcc8af677bfe1a13f2

  • SHA1

    6c500b0c566e193e24c5bb898a6f8a608e6302df

  • SHA256

    e2053f04dba525010e8376c2491de18f14c467ce4b3b97f437b220603667f1dc

  • SHA512

    0e3b9de8b6899938b44540eeb3c69eb64069ac2938dce7b8aad05df20ef4ffe8846ee017a2a95ed62a044ba43322060c7ebc4f73f07b12c77c2fb3e721000dfc

  • SSDEEP

    1536:KOOYzPuJbmipA1Lq9ta+vBUFrlYYZVkG8g/MCXY8ZkMFH6sAb/cHK5pelivdpiOg:KOOYz2xh+Lq9UZVWsAbUq5IlivnwBjR

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot5996089921:AAFFEnbgTY8Gt8G5jJy6llKhDg_Ha193t7c/sendMessage?chat_id=2054148913

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1112-75-0x0000000140000000-0x0000000140024000-memory.dmp
    .exe windows x64


    Headers

    Sections