General

  • Target

    2668-7-0x0000000000400000-0x0000000000424000-memory.dmp

  • Size

    144KB

  • MD5

    a916406e3eb5225cf773319756245007

  • SHA1

    7aea09ca405f2115c2482fb6f0d10a537b9ca1b8

  • SHA256

    cec71b05c9dc9b87793ab15943ab8e2149494dc619350b473ccc6c1b997e58af

  • SHA512

    4b09a0b9060e4a65cacad9bd4a48aabab7a8b28f85a831299ee4ef288a40da9618da2df15585284e70df534543dde34bf85ebc0c890514947af45c6bc5ce4294

  • SSDEEP

    3072:gOOYz2sMJZjJ3EJeyzJI5Lb7urNQqjwBvP:5z5VabqxoP

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6243209595:AAGECSmdSqJiVZcdFoBvotoaKcKT9Lz5Gvw/sendMessage?chat_id=1070926352

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2668-7-0x0000000000400000-0x0000000000424000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections