General
-
Target
1224-75-0x0000000000400000-0x000000000047C000-memory.dmp
-
Size
496KB
-
MD5
f2c96c6dae0cf9a3b3e583d8f302f100
-
SHA1
1a949247e8943a91f59e45536146cf6222ff49ff
-
SHA256
78e95781476ed9f11a194fb74ae86c775ea527d968edbf4d22ddab5b9c86b8bc
-
SHA512
4f7097e41e1e30d8ee6573e2d592a4938644369dde333adf28f8ab71d1df7d1669fc566d115d7d7206fc0f8d5a1d88a352536069ec8ba2d65d48e87f5a21be37
-
SSDEEP
12288:BaW3E3HDei3oXA2jCXgXLz/HQOqzjW/N2zYk:BjU3Hq6oXA2jBXHnqzjG2zYk
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot6288005341:AAGRgYv2o5lUGc3tnZ9QIy4L5Vg9lraTrSs/sendMessage?chat_id=6121807451
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1224-75-0x0000000000400000-0x000000000047C000-memory.dmp
Headers
Sections