Extracted

• • Target

    9f78e05450597bf6492983152fb0775b_JaffaCakes118

  • Size

    310KB

  • MD5

    9f78e05450597bf6492983152fb0775b

  • SHA1

    146781a936737cf7f9d7ac5022cf7385b7f165a3

  • SHA256

    7fc84151175c22d691f980a4e97131487d292e5d32e3ddf243e06065ef8ab805

  • SHA512

    44cb53ac7be417e745b886dbfd0b0e3957c213ea9f32351d22e13925d21725b8098389f61f3268ba0a8c0ef53c2f10ee2ec50f97a24a1e4b5b157a83c7ac3988

  • SSDEEP

    6144:0vebNyM+jWfmVKeCFFHMR8A9vnY28hKITCh1GWVcY:0veROyf3eCbpA9vYbIhcQp

  Score

  10^/10

  snakekeyloggerkeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2