Extracted

• • Target

    Transferencia 13-2-2024 12-21.exe

  • Size

    855KB

  • MD5

    69bbd35257d7603e97cddf814542ae3b

  • SHA1

    1b7fbdc11e81366d54b812bc9e165c9ed384f226

  • SHA256

    708ee4218d5907976919dff1722a69fe187648dcf3503a1544d822871a91fad2

  • SHA512

    8b8a62cf53d3cf3f89fbdca65f5e59f1844f2d96771172850634ef0c1cd53bafdb4c96fcd21d42f061e5686ffc3d5ebaec52a27a1f79abb350d727528efc601a

  • SSDEEP

    24576:ZTs8rLXJu1AFEwddHeWt+ZgUYeKaD8YynlF9D:ZTTLY1AFEwDHeAwtYeKa4YynlF9

  Score

  10^/10

  snakekeyloggerkeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2