General

  • Target

    2684-11-0x0000000000400000-0x0000000000424000-memory.dmp

  • Size

    144KB

  • MD5

    423369d31f0a67cdc710580c0844fd73

  • SHA1

    5ec5a3bbcb67d972f95eceb2a16da9ea77a02dea

  • SHA256

    84f642a566fc2ef5e9775f84ef2f8a13df777b115c7944d8e4db5ab407095d80

  • SHA512

    5dcc25ec7da4ee7fbc1c6d4f1ad12039be678c2c773871d8a86921278d749d8afb4f61006fbd156bee0659550a647cdb94143ae105cf727a2e25bae66c617b9f

  • SSDEEP

    1536:kOOYzPuJ+iCU2J4nakXr+vBUFMlY6Zn9dCfdGhhLzMF3YZVJpCab/zIwmFXQdIpc:kOOYz2L2qnak0ZnlZ5Cab7FKwBvP

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot1513074805:AAE9QtTNfInovOlDzP4PcE-Ro12KxYiz9Z4/sendMessage?chat_id=1673719962

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2684-11-0x0000000000400000-0x0000000000424000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections