General
-
Target
cargo details.exe
-
Size
356KB
-
Sample
231120-r9knqshe6s
-
MD5
c6e93bb1fe3776c6fab7c4dbf5ad9aa7
-
SHA1
9c8101b401864743b197029a2ceb97dcb4dc8a27
-
SHA256
2c5edc6480fe0c2912dd55fcd4d63c494e425c7466ce5655e1ebc076a0d8d389
-
SHA512
8f4e99d17ba28e12df64be1a25c8c0c30bc52cee79b1952b813a6d4c264fcf14e96ba7c430a2f4724d7081cf827bd5dcf319ffdf01096c91ad63ce35802fdaf5
-
SSDEEP
6144:KGml3pBvuZ3UAwhUWsnC93yYkBxG8Vm5Lmv/tXGAunkc8sUnerSXE:KGml5B2BUJACxyvBxnHv/t2Ask3ng
Static task
static1
Behavioral task
behavioral1
Sample
cargo details.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
cargo details.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
cargo details.exe
-
Size
356KB
-
MD5
c6e93bb1fe3776c6fab7c4dbf5ad9aa7
-
SHA1
9c8101b401864743b197029a2ceb97dcb4dc8a27
-
SHA256
2c5edc6480fe0c2912dd55fcd4d63c494e425c7466ce5655e1ebc076a0d8d389
-
SHA512
8f4e99d17ba28e12df64be1a25c8c0c30bc52cee79b1952b813a6d4c264fcf14e96ba7c430a2f4724d7081cf827bd5dcf319ffdf01096c91ad63ce35802fdaf5
-
SSDEEP
6144:KGml3pBvuZ3UAwhUWsnC93yYkBxG8Vm5Lmv/tXGAunkc8sUnerSXE:KGml5B2BUJACxyvBxnHv/t2Ask3ng
Score10/10-
Snake Keylogger payload
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-