General

  • Target

    1548-1088-0x0000000140000000-0x0000000140022000-memory.dmp

  • Size

    136KB

  • MD5

    8a62f12baa693c5501d33683485a4994

  • SHA1

    32ecb3d2a987095a1be22627db1c53db7475203a

  • SHA256

    dd2205f94150acf81cc8eea39719e9b329c6824770d013901a047dabb5c6a1aa

  • SHA512

    15d8b7379fa9aaa85084908fd230c10039b5492b2b056097a8fa48d5eb3d66f21b071aad192b65439ec4239ba98ff84aef92c13943236ec2fccdd03a525df350

  • SSDEEP

    3072:TOOYz2sMJZjJ3EJnUUeLbUsLwBvU9DbY:Az5gbqUFb

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6327865557:AAFurLDI6qF60_fIQ-oysf5c88V-Xv_Ao34/sendMessage?chat_id=5716598986

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1548-1088-0x0000000140000000-0x0000000140022000-memory.dmp
    .exe windows x64


    Headers

    Sections