General
-
Target
3f6fe65fc4eee365ec30277606b3c66a.bin
-
Size
356KB
-
Sample
231221-bvhb3afbak
-
MD5
4a81e12885d29c7c56cf66b2e1eef648
-
SHA1
1d4717d2478afcf9b2e9d3980c332ef4f2e1cfc5
-
SHA256
4f4197483d7b47b86ae9301e7580d13d7ce14beaf5d738db23a98b2a783d8d36
-
SHA512
ac4c9e2731f21860c6690d9b98891249dfd5c87cde6c1e4f275319a9e8538ba3f1568ef7283aa26590c5fce4f0d665f54fc8147eee74c40dc1a892b6f35d4fa0
-
SSDEEP
6144:0dNKjqvrO4YUc+rJbYL2DtkONV0W5fAy2Uy1gYZi4WFJeAhEoMpOL8YibT3kDTKj:0XKjL4urlON6K4r+Yk5rgohmkXXYK0
Static task
static1
Behavioral task
behavioral1
Sample
48991f467d8b22b9b36a1495de807796386f98fbadf09e01e1d913bf63951d33.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
48991f467d8b22b9b36a1495de807796386f98fbadf09e01e1d913bf63951d33.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
48991f467d8b22b9b36a1495de807796386f98fbadf09e01e1d913bf63951d33.exe
-
Size
489KB
-
MD5
3f6fe65fc4eee365ec30277606b3c66a
-
SHA1
a919285f7dc48ddd64807744acdcc82640dfc9fd
-
SHA256
48991f467d8b22b9b36a1495de807796386f98fbadf09e01e1d913bf63951d33
-
SHA512
0f2c526ca7fd994dd1831ff513941e484960e68fc5076cfcc539c893076fae3adbfa77b18641024ef2cefe7625b2bbc3bf138786010a3660d83ca837dee5d5e5
-
SSDEEP
12288:yrpviYJS8Ea54Y0YI7LPyig/jZ0RstLE:yrpasS8v54YavPyigLWqO
Score10/10-
Snake Keylogger payload
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-