General

  • Target

    2296-1088-0x0000000000400000-0x0000000000424000-memory.dmp

  • Size

    144KB

  • MD5

    2047e47b361ac0ffce2afb387c730cd7

  • SHA1

    906d02c1062c48685d5688d0cf0f20e96165f1e5

  • SHA256

    11dfea52636395e027d897397e5ac7dd9a4f0134eff965164a291f5f3a9a6abf

  • SHA512

    9e2809f80af9160fb80cf5aef5afb545a2574e06d0806d1e0a070b485dd5a9519eb39ea9e8d9451fcda494b825d2ee9fe7cc72f6352ea8eba95ed110da34edce

  • SSDEEP

    3072:QOOYz2sMJZjJ3EJk1zSk2b7ksYZvwBvPggbY:Jz5q1zP2bIUPJb

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6416078265:AAGhpjLgc9FRxiBrTnXWAPfcCmAGwxuh7Q8/sendMessage?chat_id=1467583453

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2296-1088-0x0000000000400000-0x0000000000424000-memory.dmp
    .exe windows x86


    Headers

    Sections