General

  • Target

    537c0fa08dd7d6f12163ff4d0f14f5732018da9c9f0b783b99565821fa4840f0exe_JC.exe

  • Size

    127KB

  • Sample

    230803-wnqebagd4x

  • MD5

    26f6b83f00ede490164483e6f396a7b4

  • SHA1

    0f14bc46b93ddad1bf071b28b578e8489aaa3787

  • SHA256

    537c0fa08dd7d6f12163ff4d0f14f5732018da9c9f0b783b99565821fa4840f0

  • SHA512

    7aa0ad7b1b6d48bbb96b74619cba64cfdf4a7bce8fd0779b9dbd8927fb29a52b270150bb5086c20cbc0d883fef239d5f6f1ed4f7d68f696f64306bb327986f44

  • SSDEEP

    3072:VJemedcYJyJUq2YuVAbzoZObCp4IwBtXnbY:VeGVTumbbJ3b

Malware Config

Extracted

Family

snakekeylogger

Credentials

Targets

    • Target

      537c0fa08dd7d6f12163ff4d0f14f5732018da9c9f0b783b99565821fa4840f0exe_JC.exe

    • Size

      127KB

    • MD5

      26f6b83f00ede490164483e6f396a7b4

    • SHA1

      0f14bc46b93ddad1bf071b28b578e8489aaa3787

    • SHA256

      537c0fa08dd7d6f12163ff4d0f14f5732018da9c9f0b783b99565821fa4840f0

    • SHA512

      7aa0ad7b1b6d48bbb96b74619cba64cfdf4a7bce8fd0779b9dbd8927fb29a52b270150bb5086c20cbc0d883fef239d5f6f1ed4f7d68f696f64306bb327986f44

    • SSDEEP

      3072:VJemedcYJyJUq2YuVAbzoZObCp4IwBtXnbY:VeGVTumbbJ3b

    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

    • Snake Keylogger payload

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks