General

  • Target

    2188-12-0x0000000000400000-0x0000000000424000-memory.dmp

  • Size

    144KB

  • MD5

    13583c368055984141b13ac44612efb1

  • SHA1

    f4cc211bae03972fdc157627394334cc476c58e1

  • SHA256

    f65153da90fd68344a1c8744ed3786dd1bf914adc42e486ad09337d6d1c1b1f2

  • SHA512

    88d95602b41f7fc237caa6ad75b30856ae21a95a57ac885020de4f3b6f952910471764f89fb970808830d2e340781cc01cd11cf17803ef2f6d0b21ac6e492a52

  • SSDEEP

    1536:QOOYzPuJOhGUM1LZjJob+vBUFMlY6EJkEjOEXYYKoMFhOZY1Ugncwmgb/zlOktcp:QOOYz2sMJZjJ3EJKUgnqgb762DwBvP

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6454266704:AAGc7MbDFOw3VJ52r1hPLsjSZvjH8GUmylk/sendMessage?chat_id=1467583453

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2188-12-0x0000000000400000-0x0000000000424000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections