Extracted

Extracted

• • Target

    3410529d02cdc6ee212c44cdae46c2c0.exe

  • Size

    127KB

  • MD5

    3410529d02cdc6ee212c44cdae46c2c0

  • SHA1

    7061a945f2786bf28191f856d8566ea9d61e7869

  • SHA256

    7d11e19dcc4a6891657f624485dfd6e3e0ed3f0cd1a4361cc922ebb95d7361ac

  • SHA512

    77459455e89eb954dfb943e9ee1544055fb6e010ff9050f3c4ac3aac2f655132183f9474755825647896df55457878f1b7f6d41b4aee19a99fd8ab775c035dcb

  • SSDEEP

    1536:OhrMBR29HM9mZ0kp08+vBUFrlYYnz7mrMSz+m4IsrMFPyKvn02bEb/zRWn6tlkpd:OhryR6sBkpznz5b7Rk6tlOwBINzgbY

  Score

  10^/10

  snakekeyloggerkeyloggerstealerspyware

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2