Extracted

• • Target

    85db615d02f1cdbba1b5405a19c68e97bb8fa225cd9a2938a83481189dbcef7d.exe

  • Size

    125KB

  • MD5

    3f274e9aa509d90647cdba4d36c23617

  • SHA1

    58df8ec73349d61137a59c2a64c4becd751c6c53

  • SHA256

    85db615d02f1cdbba1b5405a19c68e97bb8fa225cd9a2938a83481189dbcef7d

  • SHA512

    797f365543353f33d6b24c0237d890ba6ea0236f8a8e51cab2198ca8a849519a9a8cfc95f30ef3ea7aac540977f2bb54a7166e82b597c8bce2934be3c2203923

  • SSDEEP

    3072:86z9Jkn2xD8if0V/KEjsdb7wZzN8wBgxtgbY:1iAI/OdbcgxOb

  Score

  10^/10

  snakekeyloggercollectionkeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2