General
-
Target
1036-71-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
c8d73f02a35d73e7506c85621e58fad7
-
SHA1
0a3eb34dcf1fdbe8c91fc8114b03c30857819710
-
SHA256
a2045100582d5478799fb42f3afecf4b33746cfb6092694144f3742f7c8a0166
-
SHA512
73278973fde1294820f03162414750be9703f2757c8e4d5075c22ad9c74915d8cd6d9dcf114fec2aefad6bd6a72a7b83dc8e2e45bfa4a44bfa5cef29776230b0
-
SSDEEP
1536:VtMpEvqHEIsanj0ly+G0/nE+vBUFrlY9DZKkAMFFUmY7N0PRXbKuCG3mbeWpiOW/:VtMKH7/tDZvUb2PFbfPmeQwBIFbY
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot5900175150:AAEOWcHfBC8E-MpCblgzLaTu6oAl9xGi2Nc/sendMessage?chat_id=6236888590
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
StormKitty payload 1 IoCs
-
Stormkitty family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1036-71-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections