General
-
Target
SecuriteInfo.com.Win32.CrypterX-gen.26527.9245.exe
-
Size
430KB
-
Sample
231226-y4zc9sdhh5
-
MD5
78d347cdf5e45af486ca6fcc2756651b
-
SHA1
dbc6a1164eb07611944040d9091113568a7588ef
-
SHA256
aa733006f49afe10de1ea472aba0b3e8e8192bc59d3a3b244d6953d493e57be9
-
SHA512
f8fd694d60da9ac464ce5ed92ff9f8c86701b599869a075ec384a7ee9831f4f289e8e22b9bbbe8a61445cdfc43f2b436ebda562cec01ba2b5227390c77824f50
-
SSDEEP
12288:+lQjc/wxiNUzmVFLLUB6A9nTPGWlQB/LVDquaLXQoTNF:3eUYUzmVDALGWlQxLVHa7xT
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.CrypterX-gen.26527.9245.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.CrypterX-gen.26527.9245.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
SecuriteInfo.com.Win32.CrypterX-gen.26527.9245.exe
-
Size
430KB
-
MD5
78d347cdf5e45af486ca6fcc2756651b
-
SHA1
dbc6a1164eb07611944040d9091113568a7588ef
-
SHA256
aa733006f49afe10de1ea472aba0b3e8e8192bc59d3a3b244d6953d493e57be9
-
SHA512
f8fd694d60da9ac464ce5ed92ff9f8c86701b599869a075ec384a7ee9831f4f289e8e22b9bbbe8a61445cdfc43f2b436ebda562cec01ba2b5227390c77824f50
-
SSDEEP
12288:+lQjc/wxiNUzmVFLLUB6A9nTPGWlQB/LVDquaLXQoTNF:3eUYUzmVDALGWlQxLVHa7xT
Score10/10-
Snake Keylogger payload
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-