Extracted

• • Target

    e3edc417be072edc95357b41c5901d75_JaffaCakes118

  • Size

    770KB

  • MD5

    e3edc417be072edc95357b41c5901d75

  • SHA1

    ac9319644fb88e04255497f0462f18ccd391b709

  • SHA256

    11ec5629d8faba1d833f479be2741e05dbf9cf4e391a651afef4ed3b4f9b8cc8

  • SHA512

    c89781db5ce03cf39d5add742c9c0b2c255af1656d4fbb01b2226ee387b36ac8ce4b46e894086413ccfcb67bd1e87471e9fe414ee175fabfd6033f7f3af13b9f

  • SSDEEP

    24576:JoR6qg27BkyL7lERH7m6WyySyCB0CzU11:Wsq7BkyL767wyRyCB0/1

  Score

  10^/10

  snakekeyloggerkeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2