General
-
Target
2612-13-0x0000000000400000-0x0000000000424000-memory.dmp
-
Size
144KB
-
MD5
4004803c80b9f5b074396609bd76360c
-
SHA1
e6339c0d584df96538d3f1baa78f734498a8b60d
-
SHA256
1d32ab707a7671f97811d8b02feb0b8f227796fea3b42340b9d4229a7d9c9289
-
SHA512
50f63ee4d00fc4150022afa006b49cc5abd14f212de19968d00e603390b5cf8d2f46842b97494d94678b7cbbb7340ce57547da58e66fa1d2d70e78934a099d2e
-
SSDEEP
1536:8OOYzPuJ+iCU2J4nakXr+vBUFMlY6Zn9dCfdGhhLzMFeug3YHLW/7Mb/zRZ4hM0j:8OOYz2L2qnak0ZnRF3YkAb7kP2vwBvP
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot6248535023:AAEvCpw2Gs0HsAiSElW_xTdLU8K-oKbc0LU/sendMessage?chat_id=2076143622
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2612-13-0x0000000000400000-0x0000000000424000-memory.dmp
Headers
Sections