Extracted

• • Target

    47928899_9692545608_20230828_11218099.exe

  • Size

    1.5MB

  • MD5

    92efa77973c64d34e4e9ece2a72ce7ee

  • SHA1

    dafa81235386e6a10f387ba4b61665119ad1235c

  • SHA256

    00dd392927d9d236b9dc98f1fe174606ee9f51942a9ecd00b298331e2f5008ac

  • SHA512

    9a6de5ee56d933b9ca9bb796800208135633cbc6ce7a131fa46d4a116764a35695136982ec6d5619245b22993bd22b3565a58d816522c4aaa01c4c0328d5384a

  • SSDEEP

    49152:2FNO2aCN40TGhTyNaSp9rmapmTAadmRHhxQxdn8FgLOH:2FNOfCN40uyc4CLxdMBnFH

  Score

  10^/10

  upxsnakekeyloggerkeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2