snakekeylogger | 2108-63-0x0000000000400000-0x0000000000426000-memory[.]dmp

General

Target
2108-63-0x0000000000400000-0x0000000000426000-memory.dmp
Size 152KB
Sample230802-k3redafa4s
SHA256 7d04ee89270cbc644798cc2ebab55ea64aafe4556aa4d1d89a34354914923b26
MD5 b567e986aa7efc8d428b102095a82657
SHA1 458f99f0c7262e2f0f53da5f6a0b299a02466d39
SHA512 39c5a870394b22987dc60fbb87b34310a60622b8b310ae855ab4fdf3d376f81aac13562c87decc3738db270ffc4a491b6fd9a4777a9382c8fded71243d44f22b
SSDEEP 3072:R1KCdhbjAyoq25uqa1VbP9+bCpLncwBt:nLZLqCWbUR
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

Protocol
smtp
Host
mail.alroman.com
Port
587
Username
[email protected]
Password
abc@24638
Email to
[email protected]

Signatures

Snake Keylogger payload 1 IoCs

resource	yara_rule
sample	family_snakekeylogger

Snakekeylogger family
snakekeylogger

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2108-63-0x0000000000400000-0x0000000000426000-memory.dmp

File Explorer

2108-63-0x0000000000400000-0x0000000000426000-memory.dmp

.exe 152KB

2108-63-0x0000000000400000-0x0000000000426000-memory.dmp

SHA256 7d04ee89270cbc644798cc2ebab55ea64aafe4556aa4d1d89a34354914923b26
MD5 b567e986aa7efc8d428b102095a82657
SHA1 458f99f0c7262e2f0f53da5f6a0b299a02466d39
SHA512 39c5a870394b22987dc60fbb87b34310a60622b8b310ae855ab4fdf3d376f81aac13562c87decc3738db270ffc4a491b6fd9a4777a9382c8fded71243d44f22b
SSDEEP 3072:R1KCdhbjAyoq25uqa1VbP9+bCpLncwBt:nLZLqCWbUR
MD5 SHA1 SHA512 SSDEEP

windows x86

Snake Keylogger payload
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

132174

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing