General

  • Target

    3908-8-0x0000000000400000-0x0000000000424000-memory.dmp

  • Size

    144KB

  • Sample

    231030-gprw7sda66

  • MD5

    7f9b6eb52a521f8fd207a0f39d0dd3a5

  • SHA1

    f257920b954d6cd6411139ced99baac5816214d6

  • SHA256

    82a2bc742c480898d17ddc7071a9abb7f2e5c076867a884e5dc88691e8674202

  • SHA512

    91ddb4cf3282c2c9dc40d7fed48729e55ec0de9b1fae8f055e8eba8d625056a0837b8c32e6035731855d8a646113f6e258ba627dbaed03104f95cccdc1ab0a6a

  • SSDEEP

    3072:CuR5rR7NBBp8tqgUZLPb7N2wBDhxagbY:drtEuPb1xjb

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.resultsurex.com/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    #M(J4[B0=%g8
C2

https://api.telegram.org/bot6156533308:AAGhZIuuJLmTGWzMUHA3YxFXCaiT_llfToI/sendMessage?chat_id=5986156290

Targets

    • Target

      3908-8-0x0000000000400000-0x0000000000424000-memory.dmp

    • Size

      144KB

    • MD5

      7f9b6eb52a521f8fd207a0f39d0dd3a5

    • SHA1

      f257920b954d6cd6411139ced99baac5816214d6

    • SHA256

      82a2bc742c480898d17ddc7071a9abb7f2e5c076867a884e5dc88691e8674202

    • SHA512

      91ddb4cf3282c2c9dc40d7fed48729e55ec0de9b1fae8f055e8eba8d625056a0837b8c32e6035731855d8a646113f6e258ba627dbaed03104f95cccdc1ab0a6a

    • SSDEEP

      3072:CuR5rR7NBBp8tqgUZLPb7N2wBDhxagbY:drtEuPb1xjb

    Score
    1/10

MITRE ATT&CK Matrix

Tasks