General
-
Target
2912-68-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
3db9257ed6197bca1885fb2049a5e28b
-
SHA1
bbefe301936b4ff4339248f1824930420ed21898
-
SHA256
0bfbbea3e9c2bc9575c045958baeb80687887b1e2f9a5f00aab784401f2fd0f1
-
SHA512
60aa0fd3d5567f9e2d7c6434bb60f51c1a134a92e4a7ee77e723b68b343591dd077607f46b873a245f08e2b2aa64598025bcf6e53cc3b00cbf882ad30be6f050
-
SSDEEP
1536:fSz9LdzDWfcPtKDND3L4WDZMFJH4X8/b/zXKBLgYnyAUoepiOWB8V+g0Kcl:fSz9JeeWND3L4qAb7kgsUBwB8V+gbY
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
Credentials
Protocol: smtp- Host:
riogrande.es - Port:
25 - Username:
[email protected] - Password:
Co1000Riogrande! - Email To:
[email protected]
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2912-68-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections