General

  • Target

    4804-10-0x0000000140000000-0x0000000140022000-memory.dmp

  • Size

    136KB

  • MD5

    cc48ff5c3e6626da1e24242d8912e7a9

  • SHA1

    4d5f5f812cfef9966f1af8bb1b17de8e0bb90779

  • SHA256

    b21f5971aae108241f8456254cc233ede9d24ca3f501a357c74bc21f6559dd18

  • SHA512

    914561186939645203d46170a1665ccc3375564d68c4c2cc1e47547aaf6afd9459c2db1bc7b7985167d738f27ea1c8a8bdddd3ce461bfdf346df7d5d25cf23d4

  • SSDEEP

    3072:kOOYz2sMJZjJ3EJp6mLcbUprnwBvUdDbY:dz5qbUSUlb

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6654103254:AAHBKVbxieo7hxA3Eik4kAMYssZKRACMRr4/sendMessage?chat_id=5582419717

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4804-10-0x0000000140000000-0x0000000140022000-memory.dmp
    .exe windows x64


    Headers

    Sections