Extracted

Extracted

• • Target
    7d11e19dcc4a6891657f624485dfd6e3e0ed3f0cd1a4361cc922ebb95d7361acexe_JC.exe
  • Size 127KB
  • SHA256 7d11e19dcc4a6891657f624485dfd6e3e0ed3f0cd1a4361cc922ebb95d7361ac
  • MD5 3410529d02cdc6ee212c44cdae46c2c0
  • SHA1 7061a945f2786bf28191f856d8566ea9d61e7869
  • SHA512 77459455e89eb954dfb943e9ee1544055fb6e010ff9050f3c4ac3aac2f655132183f9474755825647896df55457878f1b7f6d41b4aee19a99fd8ab775c035dcb
  • SSDEEP 1536:OhrMBR29HM9mZ0kp08+vBUFrlYYnz7mrMSz+m4IsrMFPyKvn02bEb/zRWn6tlkpd:OhryR6sBkpznz5b7Rk6tlOwBINzgbY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  snakekeyloggerkeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2