General
-
Target
4192-8-0x0000000000400000-0x0000000000424000-memory.dmp
-
Size
144KB
-
MD5
e481d64bf1d51d528ab23ca9e0fa73d6
-
SHA1
b3034d26847748d914ffba7e61e8d722e7568c84
-
SHA256
6102bd594d711e4edaca47e051afffad475aca9a6055dea01874ecb753bd6b18
-
SHA512
e4a8c3077a4ea595c829486e1ebcc00ac8f2e614d9af655d72431ee97fd5a56ffe0c82731cfcc34e4e0b1600dbc8fdbda1dfd22080a8b93b7d354bd7a7e6d696
-
SSDEEP
3072:zJpXW0UqS5aOOSH7WSb7XfAFYPwB5x8gbY:b2vbMFBxdb
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
Credentials
Protocol: smtp- Host:
mail.comxdesign.com - Port:
587 - Username:
[email protected] - Password:
Allcare01! - Email To:
[email protected]
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4192-8-0x0000000000400000-0x0000000000424000-memory.dmp
Headers
Sections