General

  • Target

    768-70-0x0000000000400000-0x000000000047C000-memory.dmp

  • Size

    496KB

  • MD5

    0e9bbc0be39975ad5560dfd4a886cffd

  • SHA1

    8abe05da244acd7940010a77bd15f393d46cf59f

  • SHA256

    5ab58226cfe4c53f35eafc88c89e83ba8addbb479466b7163a05adb29ee57948

  • SHA512

    b1c79323d92c6b9b6d1b8d45920088d28ce3ca44f6a997926e45b1565fcc71b02c7df841e309c7669692406d3b6576cf1faa33652a751695e47d7b3485a7fe42

  • SSDEEP

    12288:V+V3E3HDei3oXA2jCXgXLz/HQOqzjW/NLT:VyU3Hq6oXA2jBXHnqzjGL

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot5719029702:AAHRvESM9-5cgUdnoIbd_V2bxXLClv1Qgso/sendMessage?chat_id=5885414949

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 768-70-0x0000000000400000-0x000000000047C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections