Overview

overview

10

Static

static

10

2940-62-0x...ry.exe

windows7-x64

2940-62-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2940-62-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    c0c008762b080761f81943ebca7b184c

  • SHA1

    fde5c05f335e7b9d7d6274c5fbcd5d1285d8daf0

  • SHA256

    ba597041f59c6b203991f353cd8db8f8531016a5c4e961d1a0cbe9364e4a20db

  • SHA512

    9731db0caa465cfb008c9c3f338de734987c32a5ca4728a4fd9f7b5066b7fe6ea141c0d8f3929e6a3f1e78a015572ca23997735e9a66eb40ffbbe5c9f4c827f0

  • SSDEEP

    3072:FI1/iasc0uNi3zDmRJAb9gb7+ZP+fBIN:kiLu+uFbA5N

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:     smtp
  • Host:
    mail.kovarviajes.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    P4tt1kr

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2940-62-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections