General

  • Target

    2784-10-0x0000000140000000-0x0000000140022000-memory.dmp

  • Size

    136KB

  • MD5

    0e1cb5caa0887ff09c2865406fcfb8be

  • SHA1

    7ef5aee9ed6be8002761b7a88ab348130c2315bd

  • SHA256

    dc9386029148e24e89f6478e64ea20beb8946ad7981d1c8d61ec037de758228f

  • SHA512

    115f16cc10b645f46230b043776867bb9790d05602897bb7a7b726f6ef44df172296a0bd380d51ab0c8cbb62c7dbf9aaf21a252841651d7f46184370feecd511

  • SSDEEP

    1536:TOOYzPuJOhGUM1LZjJob+vBUFMlY6EJkEjOEXYYKoMFuIP35jINUb/cLCQer3piV:TOOYz2sMJZjJ3EJVV2bUc5wBvUtDbY

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6495173086:AAHM8NMu-uOSJHZaHij-umtWDUwi5-hOLog/sendMessage?chat_id=5262627523

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2784-10-0x0000000140000000-0x0000000140022000-memory.dmp
    .exe windows:4 windows x64


    Headers

    Sections