General

  • Target

    1236-71-0x0000000000400000-0x000000000047C000-memory.dmp

  • Size

    496KB

  • MD5

    9b4a734428151e0ebe7ee240f95ac881

  • SHA1

    e35076a307351cc82f1703cce59f620cce3179e2

  • SHA256

    a2043618d319ecc8c9191985d28a59cad6ca7376fe91b8fe081ed90838500368

  • SHA512

    5a1beeaf5f5f49356009cf027dca22c1451efd1b3621cb4c26c031a451ccc4d8b21447aa0363b72cd79d015f67c9f036d02889f6d2ac1993ba2791cc0f382058

  • SSDEEP

    12288:G+V3E3HDei3oXA2jCXgXLz/HQOqzjW/Na:GyU3Hq6oXA2jBXHnqzjGa

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot5719029702:AAHRvESM9-5cgUdnoIbd_V2bxXLClv1Qgso/sendMessage?chat_id=5885414949

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1236-71-0x0000000000400000-0x000000000047C000-memory.dmp
    .exe windows x86


    Headers

    Sections