General
-
Target
366afad132e168747e82f4aec0e8144cc92bbfbdb988b55d8a8e1a985092b76b.exe
-
Size
130KB
-
MD5
233ba091cc5c7b102991d67ac031479b
-
SHA1
141943aa769c02f8c1465adae12f352b7edc3cad
-
SHA256
366afad132e168747e82f4aec0e8144cc92bbfbdb988b55d8a8e1a985092b76b
-
SHA512
1705cf7df8206645ad390abd5422070e5f23835de120e4a05ce36c5c96de92c6cc1102ab7c20f62d521fd5756924521dcc029ec08b221f2b0e8b49fe508f373b
-
SSDEEP
3072:L2ckK2iu2HGJ13HJ4TfCiakblbHaBYmdpwvEXLo7LNgbY:aK2i9HGJuJakbgk7Lub
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
Credentials
Protocol: smtp- Host:
mail.daipro.com.mx - Port:
587 - Username:
[email protected] - Password:
DAIpro123** - Email To:
[email protected]
C2
https://scratchdreams.tk
Signatures
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables referencing many email and collaboration clients. Observed in information stealers 1 IoCs
-
Detects executables with potential process hoocking 1 IoCs
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
366afad132e168747e82f4aec0e8144cc92bbfbdb988b55d8a8e1a985092b76b.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections