Overview

overview

10

Static

static

10

3908-8-0x0...ry.exe

windows7-x64

3908-8-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3908-8-0x0000000000400000-0x0000000000424000-memory.dmp

  • Size

    144KB

  • MD5

    7f9b6eb52a521f8fd207a0f39d0dd3a5

  • SHA1

    f257920b954d6cd6411139ced99baac5816214d6

  • SHA256

    82a2bc742c480898d17ddc7071a9abb7f2e5c076867a884e5dc88691e8674202

  • SHA512

    91ddb4cf3282c2c9dc40d7fed48729e55ec0de9b1fae8f055e8eba8d625056a0837b8c32e6035731855d8a646113f6e258ba627dbaed03104f95cccdc1ab0a6a

  • SSDEEP

    3072:CuR5rR7NBBp8tqgUZLPb7N2wBDhxagbY:drtEuPb1xjb

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.resultsurex.com/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    #M(J4[B0=%g8
C2

https://api.telegram.org/bot6156533308:AAGhZIuuJLmTGWzMUHA3YxFXCaiT_llfToI/sendMessage?chat_id=5986156290

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3908-8-0x0000000000400000-0x0000000000424000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections