General
-
Target
MT Marine Tiger Particulars.exe
-
Size
515KB
-
Sample
231221-rz96msafhp
-
MD5
dfdd7ffec44bc0be0c4d58f33a7428ed
-
SHA1
a352935a55ea1e1bb3e9853b6971806b1e64bf48
-
SHA256
f0df0ec243153f35a5522715fb79c372fde175ad98596185ec2eea5a16a535bf
-
SHA512
4dd5ea906f6113a2aec3f7d03edc45ba86f9b8d9c14b81ef15acca133f8d5d83997904a0733fab522f3ff71cc88c14b647f1e96af86aecddc392a33b6ef9e879
-
SSDEEP
12288:sXiF3PPBQI0qkGSdbd4dHlCTO3pb2ASwUHqGUS:sm3PPBQIZUdYFCT6dSVrU
Static task
static1
Behavioral task
behavioral1
Sample
MT Marine Tiger Particulars.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
MT Marine Tiger Particulars.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
MT Marine Tiger Particulars.exe
-
Size
515KB
-
MD5
dfdd7ffec44bc0be0c4d58f33a7428ed
-
SHA1
a352935a55ea1e1bb3e9853b6971806b1e64bf48
-
SHA256
f0df0ec243153f35a5522715fb79c372fde175ad98596185ec2eea5a16a535bf
-
SHA512
4dd5ea906f6113a2aec3f7d03edc45ba86f9b8d9c14b81ef15acca133f8d5d83997904a0733fab522f3ff71cc88c14b647f1e96af86aecddc392a33b6ef9e879
-
SSDEEP
12288:sXiF3PPBQI0qkGSdbd4dHlCTO3pb2ASwUHqGUS:sm3PPBQIZUdYFCT6dSVrU
Score10/10-
Snake Keylogger payload
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-