Overview

overview

10

Static

static

10

2656-62-0x...ry.exe

windows7-x64

10

2656-62-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2656-62-0x0000000000710000-0x0000000000736000-memory.dmp

  • Size

    152KB

  • MD5

    c9c19a37e4d75e52bf415c133f546fc2

  • SHA1

    251b410fc802b8378bc9a9b2df6c2ce0d63c20df

  • SHA256

    d960a12a13f566bc978e93bcb44d10c6345ce505487f55b8291d635cefee2c84

  • SHA512

    4a2bd3ff096518e4a418004d72d5eb27ca0e108270ddabf48598a7422368795512aa4931b57558cb2ed5fe45a4fc86024ce41778e9c2833e29962f47459ffd55

  • SSDEEP

    3072:ffDDt3rX3NVk7vJr2b7jq7UTmwB8V4gbY:vt7aRabydVBb

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:     ftp
  • Host:
    ftp://brdm.cloud/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    !Awk{o$88]JW

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2656-62-0x0000000000710000-0x0000000000736000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections