General

  • Target

    2c94dd555d927ad1bee732c64d4dec5e

  • Size

    126KB

  • Sample

    231231-htvpbsdhe6

  • MD5

    2c94dd555d927ad1bee732c64d4dec5e

  • SHA1

    1f8faf2cd27eae38ed505998ceaee96674df8332

  • SHA256

    dc157362e9c0469b3d8909770c5879a1e5cbaa6ae5e0d8203c536cbce6131901

  • SHA512

    5e529a63affe17f7019a696f50b0619d4238433b535dc55d25b85c640c8fe17cd7caf7b67c1309696e72316bca1524c06a8be2c13da382d3bd40e510774d9bc2

  • SSDEEP

    3072:NQyVffZ79CXBzek8BYbCH/UfBwBXknbY:Ziskhbiyb

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot1923344551:AAGJ9MeV4yHipzEdvvxVuepm8PFUNaCZez4/sendMessage?chat_id=1208289397

Targets

    • Target

      2c94dd555d927ad1bee732c64d4dec5e

    • Size

      126KB

    • MD5

      2c94dd555d927ad1bee732c64d4dec5e

    • SHA1

      1f8faf2cd27eae38ed505998ceaee96674df8332

    • SHA256

      dc157362e9c0469b3d8909770c5879a1e5cbaa6ae5e0d8203c536cbce6131901

    • SHA512

      5e529a63affe17f7019a696f50b0619d4238433b535dc55d25b85c640c8fe17cd7caf7b67c1309696e72316bca1524c06a8be2c13da382d3bd40e510774d9bc2

    • SSDEEP

      3072:NQyVffZ79CXBzek8BYbCH/UfBwBXknbY:Ziskhbiyb

    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

    • Snake Keylogger payload

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks