Overview

overview

10

Static

static

10

2652-10-0x...ry.exe

windows7-x64

2652-10-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2652-10-0x0000000000400000-0x000000000047C000-memory.dmp

  • Size

    496KB

  • MD5

    24315095a9335f50d608cd31753171c5

  • SHA1

    812679ccd2b0267746a4ea6d1f513dea356a4d99

  • SHA256

    43360f7de61d72042de49d0c0c0a060014d006c38996a3a35d777cb3caa079f9

  • SHA512

    ff7b0650d7a4ef3e8eed3c75afe355a21d27bc16af64c2ebcbb0bfc276ff8a203c0f77b2feccdfca64e50faf5cf63a0bdb7516b35a90e321250e7a7eb80e0866

  • SSDEEP

    12288:pRd3E3HDei3oXA2jCXgXLz/HQOqzjW/Nsddd8:p7U3Hq6oXA2jBXHnqzjGsddd8

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:     smtp
  • Host:
    megatechcontrol.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    megatech1#

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2652-10-0x0000000000400000-0x000000000047C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections