Extracted

• • Target

    06ecf916b6e3d161ee0614ac558477f56b8f9212fc41bf00234ff62b15b86027.exe

  • Size

    123KB

  • MD5

    cb1d86841c8f922f3a4106b0dba1b144

  • SHA1

    8eacdefdb557684ca8e9204621e7459d339d8f28

  • SHA256

    06ecf916b6e3d161ee0614ac558477f56b8f9212fc41bf00234ff62b15b86027

  • SHA512

    7da8c39b95ab5c81212869c81eb781b8023f60bc321d1def49079792f7b32949fdf8c67202585292547a3653252dde503b5facaf484a48cc2f27ca24ff8f2a5d

  • SSDEEP

    3072:Ww1/isKYBIkBGiKupMnmb7fDf7gHwBkxSgbY:Ziy3T0mbjD8xbb

  Score

  10^/10

  snakekeyloggercollectionkeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2