General

  • Target

    2180-12-0x0000000000400000-0x0000000000424000-memory.dmp

  • Size

    144KB

  • MD5

    573b2421597db90dc91cb255a392af5f

  • SHA1

    6668838b3b5ddf8c82999b1ddc9110e00c14547c

  • SHA256

    ef42204f1e6b845ce076cac4f9ce04c86e348f18e7bd85cb8d55272da5b56deb

  • SHA512

    79ba9b23d46a4a9d862f186c077e459fb9a68bb968a92ee99019c908b32f07aec7f4143da6ce855f325b3115a8ce32066c17eb5954e439cd0e61bc86b4a2e400

  • SSDEEP

    1536:JfOOYzPuJbzuPKEId0zjk8oOMFIrPoBcEFb/zjPEl2ucQpiOWBKnVN:5OOYz25mG0zjk8o8sB7b7K2ucCwBKn

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6630888620:AAE93xtVx5O2Dxt-GABfyfFS0US096iv3q8/sendMessage?chat_id=1467583453

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2180-12-0x0000000000400000-0x0000000000424000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections