Overview

overview

10

Static

static

10

2860-3-0x0...ry.exe

windows7-x64

2860-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2860-3-0x0000000000400000-0x0000000000424000-memory.dmp

  • Size

    144KB

  • MD5

    fd4d25efcc6dcf8d747da483662fa21e

  • SHA1

    cc8c3e9aef78e071d1e792eed197ee0139c09309

  • SHA256

    50e85f6f768c41cb6b42617c8cfa845648f30115eddc91dec703dcb6c4fde9ee

  • SHA512

    2148d6d057b471ebe0e9ab10d83d116772cc594fe74b7cd60d8648f64c6427f7365b41fbbbe532c06f19960fac5ec05a509676493663cc3941b52555579ab849

  • SSDEEP

    3072:zw1/isKYBIkBGiKupMnmb7fDf7gHwBkxSgbY:iiy3T0mbjD8xbb

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:     smtp
  • Host:
    mail.gkas.com.tr
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    Gkasteknik@2022

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2860-3-0x0000000000400000-0x0000000000424000-memory.dmp
    .exe windows x86


    Headers

    Sections