General

  • Target

    876-64-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    b0ede9a66e7eee682403d570de2e3533

  • SHA1

    5db02b952a085b644d5fd1c75469a7b9d6a898bc

  • SHA256

    2b2bee72bc2631285c77f2056f1161ef6a1b6c3caf0eca3dc10002e2124bfabb

  • SHA512

    28f15db70c5c7c6ad3f2900224dd3f9607e2846aa71b40d4dac75058bedc7ceaaaf77f104dfc9361ecf9eb7f6c51ae60ef83c90bfde17f6b3597dd03d098c6d5

  • SSDEEP

    3072:WAgAEkoHj/LDdUcAvxsb8cg7wBj2OFbY:LxW+DJsbHZ26b

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot5869797424:AAFj7jfdzfUw1CCCNzehFXiYeFWrzxnHnAs/sendMessage?chat_id=1715191138

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 876-64-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections