Overview

overview

10

Static

static

3

REMITTANCE SWIFT.exe

windows7-x64

10

REMITTANCE SWIFT.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    REMITTANCE SWIFT.exe

  • Size

    613KB

  • Sample

    231205-vfhttscf7s

  • MD5

    f31bad5c33706d19bb437286c611c96f

  • SHA1

    b1c62e91f2d3a639bc457594184d01ed70fbe70b

  • SHA256

    3198d00651176dccb2f68869fd1fb7882daa1073006b963b2dc254f4e28fddf2

  • SHA512

    5af7aa0e49031c4e12935555e8cae35611382b583ff1596215bdebf78946fe5fa36c93a322aa12275c359ef30cd50a7dedee526b0d5a1f0f1bbeed957898b617

  • SSDEEP

    12288:UG5nF8ME6jD/cddS/YNsSGxc1wYGDYkPX19oFppwsW:UGPtD/SdS/YNsbxcfzkPXwHF

Score
10/10
snakekeyloggerkeyloggerstealer

Malware Config

Extracted

Family

snakekeylogger

Credentials

Targets

    • Target

      REMITTANCE SWIFT.exe

    • Size

      613KB

    • MD5

      f31bad5c33706d19bb437286c611c96f

    • SHA1

      b1c62e91f2d3a639bc457594184d01ed70fbe70b

    • SHA256

      3198d00651176dccb2f68869fd1fb7882daa1073006b963b2dc254f4e28fddf2

    • SHA512

      5af7aa0e49031c4e12935555e8cae35611382b583ff1596215bdebf78946fe5fa36c93a322aa12275c359ef30cd50a7dedee526b0d5a1f0f1bbeed957898b617

    • SSDEEP

      12288:UG5nF8ME6jD/cddS/YNsSGxc1wYGDYkPX19oFppwsW:UGPtD/SdS/YNsbxcfzkPXwHF

    Score
    10/10
    snakekeyloggerkeyloggerstealer

    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

      stealerkeyloggersnakekeylogger

    • Snake Keylogger payload

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks