Extracted

• • Target

    2836-9-0x0000000000410000-0x0000000000436000-memory.dmp

  • Size

    152KB

  • MD5

    6060dbd001ea86a0a4bfdaaf8242cb19

  • SHA1

    246d7a2531408cef2d9116c6f52f32dcf2f5751d

  • SHA256

    caf291befbd6f8e3b5836c00840d55a00ef5929b5148c012b0bef3e1ce60ccde

  • SHA512

    b55bfd8c215c392f0d427236c8bc160e0dcd09fd3d9383b24f36f1890e6246a4a8a93d865471be78c4f0fe30f13302ba2cd210ca802c9e9975cb804ce05ab4e1

  • SSDEEP

    3072:8MorDWr82YOI1wEfeUCBFv7Vm1TqGTgD+bS4sQIwvxTumtgbY:g2YOcwEfzRNTgqbOmOb

  Score

  10^/10

  snakekeyloggercollectionkeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2