General
-
Target
3068-7-0x0000000000400000-0x0000000000424000-memory.dmp
-
Size
144KB
-
MD5
9d2ee626166afdd203dc03099f0c9ffb
-
SHA1
c7e57831cc9508670446e488ce52dcb7afb7618c
-
SHA256
b6327755364be638313a923f969dcae4feb9d4a5382b1d675ef70e949e397c8d
-
SHA512
0ddf34e9ad1c21a554a83fe93ecce3c379b97c4d1a04e2e79e793ec898e3c59ad53e619c0e48fdca6a6403d60244ad89278a4897f70aa36315f66d1b32f36013
-
SSDEEP
3072:4OOYz2M2Hhi5navGkL8RszbVk+mvwBJx:hz+Okpbf1x
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot6791427761:AAEq2ybkfsfQ4vvX1WVwRKr-rekQ-dk6jcM/sendMessage?chat_id=6443825857
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3068-7-0x0000000000400000-0x0000000000424000-memory.dmp
Headers
Sections