General

  • Target

    2960-64-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • Sample

    230718-hyvvwshf2v

  • MD5

    e79ce7506e2c301276893b13b5155961

  • SHA1

    e5d5f143d9d4c7844df2fdc40a12bb4b700656fc

  • SHA256

    7d877b693377e5a507a580775232a1967256fe4c4f6bb0144c9caa605fbba1a2

  • SHA512

    02cf89315d41e080542c6f8b485e02c04404482175c00694bfc7de37d2bea320063d452d57a1c68a13205ec5974d1e279c6025ad1cd406c1d7e956270c8f77df

  • SSDEEP

    1536:/PTbARNE4rkNqUd6dU4xi+vBUFrlYYBY7B+GxWgY5S65MFTTp7qiHotb/zxh5GMb:/PTbINEQdU4ABY/Ib7b5JwB4NXgbY

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://posadalaprotegida.com.ar/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    rBmj!U6bgEm8

Targets

    • Target

      2960-64-0x0000000000400000-0x0000000000426000-memory.dmp

    • Size

      152KB

    • MD5

      e79ce7506e2c301276893b13b5155961

    • SHA1

      e5d5f143d9d4c7844df2fdc40a12bb4b700656fc

    • SHA256

      7d877b693377e5a507a580775232a1967256fe4c4f6bb0144c9caa605fbba1a2

    • SHA512

      02cf89315d41e080542c6f8b485e02c04404482175c00694bfc7de37d2bea320063d452d57a1c68a13205ec5974d1e279c6025ad1cd406c1d7e956270c8f77df

    • SSDEEP

      1536:/PTbARNE4rkNqUd6dU4xi+vBUFrlYYBY7B+GxWgY5S65MFTTp7qiHotb/zxh5GMb:/PTbINEQdU4ABY/Ib7b5JwB4NXgbY

    Score
    1/10

MITRE ATT&CK Matrix

Tasks