Extracted

• • Target
    e6716571eecc33687c8a777c5088b6c6.exe
  • Size 535KB
  • SHA256 113110be82acb7cb2ab34a08a27eccba3c4ec6ddaf06e8ca1c50fd343197a7a7
  • MD5 e6716571eecc33687c8a777c5088b6c6
  • SHA1 5cc10d9591021b8d4e2176f2566e422106af10bb
  • SHA512 1155bffaa525db79a42bcd4adf0f03c8eb1dbbbc65ab7abf2053b78d0e4e1ab6a68e8e13a53b9a966b3b6fb52ab8ea6a4c2dd3c981d0f4ac52ea1125bfaca469
  • SSDEEP 12288:OmdXOwdXdoIRdCLUoOZ2EYEeEpbBlJ+BNfE:lFdDdeth8bBH+BZE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  snakekeyloggerkeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2