General

  • Target

    2712-17-0x0000000000400000-0x0000000000424000-memory.dmp

  • Size

    144KB

  • MD5

    4a785bcc213bebeb5c2f8e8daaa8b5a9

  • SHA1

    ce240f9ccf777271ecbf2e63abec2d88c7d7e50c

  • SHA256

    a97ddd7d4f47f33d4277959fd44ad5f08090e4f3204852c284db966a2fbec51c

  • SHA512

    6c370f57343b14e760a418cf4691175068f144a7094331acba839ee0db80f7dbc7de119348108240c5e2b61272af6873ddaece61df69c7c5ffbf78cb21c57f7a

  • SSDEEP

    1536:Vw1/iDIVFhCnMIkSZ9/h1+vBUFMlY6gYkChwCIZKk7MFulljkYfCPYqb/zbv+7pv:Vw1/isF/29/IgY++Yagqb7KVwBgZ

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:
    smtp
  • Host:
    mail.bhojwanindia.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    bombayoffice123

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2712-17-0x0000000000400000-0x0000000000424000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections