General

  • Target

    2644-12-0x0000000000400000-0x0000000000424000-memory.dmp

  • Size

    144KB

  • MD5

    58be98b8abc14b9c42ea1c92e945db6b

  • SHA1

    8c81fca4f18d1fea86979e8965eee04addf474a2

  • SHA256

    da6a9df83e74bf0a73dfbba58b506a5e39cf53d964bb7d182d0c218d4522ad86

  • SHA512

    33d63df96d2bef218a7c8d6ce0bfe4c0f37cbddcd36362fe256cffbdcc725e5a831469700a97ddc9d9597c41ab5a01e5210be40772468d72f439a106443f695d

  • SSDEEP

    3072:gOOYz2sMJZjJ3EJxBxjob7locwBvPwgbY:5z5jobZIPZb

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6735527834:AAH3PffzMarE3Ys8tyS4SQ0IBXrHFKmsmnQ/sendMessage?chat_id=6692536703

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2644-12-0x0000000000400000-0x0000000000424000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections