General
- Target 2284-11-0x0000000000400000-0x0000000000426000-memory.dmp
- Size 152KB
- Sample240502-h4fcdsec58
- SHA256 b730e4ad260f12c596bed66941ed4a5d7c48586343719dc8e8efae1460aae530
- MD5 1b3b4c31f16cc038b416ac78aba05798
- SHA1 220561e771802b30ddc7e6211c7a2e0bb16524e7
- SHA512 27a77f18f620bbc3b9c6c0598641c15f9a7a0fdf98604f0d5a5662180e089bf77e41f475048084861deb1ca93893b2ea64e1c58bd27d96b3af1be5f3d503e3ba
- SSDEEP 3072:Wa9q2DEVYUEcciPL1sfyblxTisQtwvxLo7L5gbY:a2DEaUEJabM7Lyb
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2284-11-0x0000000000400000-0x0000000000426000-memory.exe
Resource
win7-20240215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2284-11-0x0000000000400000-0x0000000000426000-memory.exe
Resource
win10v2004-20240419-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
snakekeylogger
Credentials
-
Protocol
smtp
-
Host
mail.eraslangroup.net
-
Port
587
-
Username
-
Password
aHZAyjDK
-
Email to
C2
-
https://scratchdreams.tk
Targets
-
- Target 2284-11-0x0000000000400000-0x0000000000426000-memory.dmp
- Size 152KB
- SHA256 b730e4ad260f12c596bed66941ed4a5d7c48586343719dc8e8efae1460aae530
- MD5 1b3b4c31f16cc038b416ac78aba05798
- SHA1 220561e771802b30ddc7e6211c7a2e0bb16524e7
- SHA512 27a77f18f620bbc3b9c6c0598641c15f9a7a0fdf98604f0d5a5662180e089bf77e41f475048084861deb1ca93893b2ea64e1c58bd27d96b3af1be5f3d503e3ba
- SSDEEP 3072:Wa9q2DEVYUEcciPL1sfyblxTisQtwvxLo7L5gbY:a2DEaUEJabM7Lyb
- MD5 SHA1 SHA512 SSDEEP
Score1/10