General
-
Target
2960-64-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
Sample
230718-hyvvwshf2v
-
MD5
e79ce7506e2c301276893b13b5155961
-
SHA1
e5d5f143d9d4c7844df2fdc40a12bb4b700656fc
-
SHA256
7d877b693377e5a507a580775232a1967256fe4c4f6bb0144c9caa605fbba1a2
-
SHA512
02cf89315d41e080542c6f8b485e02c04404482175c00694bfc7de37d2bea320063d452d57a1c68a13205ec5974d1e279c6025ad1cd406c1d7e956270c8f77df
-
SSDEEP
1536:/PTbARNE4rkNqUd6dU4xi+vBUFrlYYBY7B+GxWgY5S65MFTTp7qiHotb/zxh5GMb:/PTbINEQdU4ABY/Ib7b5JwB4NXgbY
Behavioral task
behavioral1
Sample
2960-64-0x0000000000400000-0x0000000000426000-memory.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2960-64-0x0000000000400000-0x0000000000426000-memory.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
snakekeylogger
Protocol: ftp- Host:
ftp://posadalaprotegida.com.ar/ - Port:
21 - Username:
[email protected] - Password:
rBmj!U6bgEm8
Targets
-
-
Target
2960-64-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
e79ce7506e2c301276893b13b5155961
-
SHA1
e5d5f143d9d4c7844df2fdc40a12bb4b700656fc
-
SHA256
7d877b693377e5a507a580775232a1967256fe4c4f6bb0144c9caa605fbba1a2
-
SHA512
02cf89315d41e080542c6f8b485e02c04404482175c00694bfc7de37d2bea320063d452d57a1c68a13205ec5974d1e279c6025ad1cd406c1d7e956270c8f77df
-
SSDEEP
1536:/PTbARNE4rkNqUd6dU4xi+vBUFrlYYBY7B+GxWgY5S65MFTTp7qiHotb/zxh5GMb:/PTbINEQdU4ABY/Ib7b5JwB4NXgbY
Score1/10 -