General

  • Target

    0x003f00000000f609-25.dat

  • Size

    126KB

  • MD5

    7fe292bc5ea2ef1ec95fbe7c4283b69b

  • SHA1

    1b4ac2a792855b53db41b4280c4f41f60895a41d

  • SHA256

    fe5c1d889311a86b8c0c29a8585acaf79bef3a03c3db746e582dc21ddda60a07

  • SHA512

    e0d753ed326fb33af00e301f05bc943fe072162b37964be965f19d5181de0775e11bca5c637b62a1c6db0b94366dc07967faee2d536afca5640994f21f12544c

  • SSDEEP

    3072:1ALhE1U1mv5C425pNyuN2b7GSAwBlTxfgbY:jch+Jbzx4b

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.product-secured.com/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    575K5(MaZro2575K5(MaZro2

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x003f00000000f609-25.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections