Overview

overview

10

Static

static

10

4708-9-0x0...ry.exe

windows7-x64

4708-9-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4708-9-0x0000000140000000-0x0000000140022000-memory.dmp

  • Size

    136KB

  • MD5

    b56c08e5294e9f23cd1794172cc85062

  • SHA1

    13c97a8474cdeb2616b8db7d30b8271f079906ab

  • SHA256

    29d41cbd8159094d8c543e2ed593489ffeba3454790d6aef29b48eda0e1445be

  • SHA512

    ce4bffaec564b461f7a1203a2360402b1e82f500eb9bf2c4af067405b81a33b710ceb2124fec39104b4ccc0c906f055f492ce127ec0f73fbdb719e88dad66506

  • SSDEEP

    3072:DOOYz2sMJZjJ3EJW3abUSOBb/H6wBvUNDbY:Qz5ZbiBb/xU1b

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6353838065:AAFw-dmIrW4AukRvprM9LipsTyBb8iZ9FxM/sendMessage?chat_id=1467583453

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4708-9-0x0000000140000000-0x0000000140022000-memory.dmp
    .exe windows:4 windows x64


    Headers

    Sections