General
-
Target
2284-11-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
1b3b4c31f16cc038b416ac78aba05798
-
SHA1
220561e771802b30ddc7e6211c7a2e0bb16524e7
-
SHA256
b730e4ad260f12c596bed66941ed4a5d7c48586343719dc8e8efae1460aae530
-
SHA512
27a77f18f620bbc3b9c6c0598641c15f9a7a0fdf98604f0d5a5662180e089bf77e41f475048084861deb1ca93893b2ea64e1c58bd27d96b3af1be5f3d503e3ba
-
SSDEEP
3072:Wa9q2DEVYUEcciPL1sfyblxTisQtwvxLo7L5gbY:a2DEaUEJabM7Lyb
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
Credentials
Protocol: smtp- Host:
mail.eraslangroup.net - Port:
587 - Username:
[email protected] - Password:
aHZAyjDK - Email To:
[email protected]
C2
https://scratchdreams.tk
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2284-11-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections