Overview

overview

10

Static

static

3

fe1f472eb9...18.exe

windows7-x64

10

fe1f472eb9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe1f472eb9e98437f780d29306c80f53_JaffaCakes118

  • Size

    651KB

  • Sample

    240421-bzbp3sfh6t

  • MD5

    fe1f472eb9e98437f780d29306c80f53

  • SHA1

    4c0c2cfb53a8b296a70adc2e651600c00743ff3d

  • SHA256

    0480c4941c8a54b545135a700a578e743563cd932dfd8cd82c38e62c5627fec2

  • SHA512

    590dc8d4ee9716430a6f24c69bfc92a09e899e29489d4ecb9f4e08ee698958e4b9a1d41f2895bb56458c37a34cbc0a5c1d22c4f550478cccfe62f7dc2c1f4235

  • SSDEEP

    12288:FqnBmhp+gczyhNSvRbBQHR4qz91hI0zSaNsvz+yuWDVId21NaI+E8tyvXEVgZ9QF:FqsJSZ9Qm16EyaNC9SmCbN3dI9

Score
10/10
snakekeyloggerkeyloggerstealer

Malware Config

Targets

    • Target

      fe1f472eb9e98437f780d29306c80f53_JaffaCakes118

    • Size

      651KB

    • MD5

      fe1f472eb9e98437f780d29306c80f53

    • SHA1

      4c0c2cfb53a8b296a70adc2e651600c00743ff3d

    • SHA256

      0480c4941c8a54b545135a700a578e743563cd932dfd8cd82c38e62c5627fec2

    • SHA512

      590dc8d4ee9716430a6f24c69bfc92a09e899e29489d4ecb9f4e08ee698958e4b9a1d41f2895bb56458c37a34cbc0a5c1d22c4f550478cccfe62f7dc2c1f4235

    • SSDEEP

      12288:FqnBmhp+gczyhNSvRbBQHR4qz91hI0zSaNsvz+yuWDVId21NaI+E8tyvXEVgZ9QF:FqsJSZ9Qm16EyaNC9SmCbN3dI9

    Score
    10/10
    snakekeyloggerkeyloggerstealer

    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

      stealerkeyloggersnakekeylogger

    • Snake Keylogger payload

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks