Overview

overview

10

Static

static

10

912-78-0x0...ry.exe

windows7-x64

912-78-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    912-78-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    af0462c19745f0bd9df944beabcde584

  • SHA1

    c4e1165e87f78b69f92a36bee1296e7c3ac0d5f2

  • SHA256

    829f6ba157861244fe1f76acd30590fd6e3eea561eb1d12ae1728d4ddc5e80d6

  • SHA512

    2f88c5e0a2693da91838f897aeb36ab5425f0544264a5d022d1dd895c7781bc28c3ce397bafec6a894cc13801c908b2ef09b9c4ef15f369f634650a50ce1cdaa

  • SSDEEP

    1536:6jdKxVAyl01IZBCq3UgLyYMFUEJJEZomubb/ztT8aVtpiOWBVjN:6jdK8uyk4q3UgLj3yb7r3wBVjN

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:     smtp
  • Host:
    mail.icdanismanlik.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    Emre2010!

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 912-78-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections