Overview

overview

10

Static

static

10

2960-64-0x...ry.exe

windows7-x64

2960-64-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2960-64-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    e79ce7506e2c301276893b13b5155961

  • SHA1

    e5d5f143d9d4c7844df2fdc40a12bb4b700656fc

  • SHA256

    7d877b693377e5a507a580775232a1967256fe4c4f6bb0144c9caa605fbba1a2

  • SHA512

    02cf89315d41e080542c6f8b485e02c04404482175c00694bfc7de37d2bea320063d452d57a1c68a13205ec5974d1e279c6025ad1cd406c1d7e956270c8f77df

  • SSDEEP

    1536:/PTbARNE4rkNqUd6dU4xi+vBUFrlYYBY7B+GxWgY5S65MFTTp7qiHotb/zxh5GMb:/PTbINEQdU4ABY/Ib7b5JwB4NXgbY

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:     ftp
  • Host:
    ftp://posadalaprotegida.com.ar/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    rBmj!U6bgEm8

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2960-64-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections