Extracted

• • Target

    SCH09876568009876-0900.exe

  • Size

    362KB

  • MD5

    aa5a9b89face6a291cf9057d321bdbb9

  • SHA1

    d32b056096e926d6ba6ed31acf144e31eee6aa0e

  • SHA256

    3e6e127fca912f8729025ec259e391805ff42648fa75c34f9ccc6551cb7fba55

  • SHA512

    21b1876cf85d48a7cc54df836dbc2266e48e57f9679f260159185d78770b93334f06e8def42729021ffb082d822acf6d3cdc7839c9be112df9f31ee6b765f169

  • SSDEEP

    6144:r0nJBIKD2SJMz2dR8rZNlvzd4o6adHT3+lo2iUSe7Ye8i9Sw3Kc50RxTlSdk6ces:MJfD2S+nRd4CHCTi/hetSw3juPek6ce5

  Score

  10^/10

  snakekeyloggerkeyloggerstealercollection

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2

• • Target

    SCH09876568009876-098.exe

  • Size

    356KB

  • MD5

    a9d79ca8143f17ee3d17596b500676c2

  • SHA1

    737af7ca98ab36041889940a3468f690549448be

  • SHA256

    765daa6202872b486382897bb06f4e17522fc29173677ea38e6e3451c5fb5d3e

  • SHA512

    f66cd53aa1d123b8ddf8e02e291d9cb08e43fed2d0b107be328799e55f33a4383b7715d50e6b89dbea0d08f9560232d579ee2f4ad4082d43645e2c7bc05f1c16

  • SSDEEP

    6144:L0nJBIKD2SJMz2dR8rZNlvzB0CCadHT3+lo2iUSe7Ye8i9Sw3Kc50RxTlSdk6ce4:sJfD2S+nRBl/HCTi/hetSw3juPek6ceV

  Score

  10^/10

  snakekeyloggerkeyloggerstealercollection

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral3behavioral4