General
-
Target
U prilogu je nova lista narudzbi.exe
-
Size
882KB
-
Sample
240508-k2n8mach2z
-
MD5
2e085ebf8dcf858b5f8e4fd12cd96b23
-
SHA1
d28c9c4555a704e82c020ebb1115aed8dd866e36
-
SHA256
62a97283872ab50c61ba23f69349b8244519cec93a00b7ee244fe58b9a685bbe
-
SHA512
9b430e40128e325d5dad45b1df423a3ff99a4e14f1f9c7abf238608b2ca892a060adb9d1ee67406752a8ec48d895097253882d8396b4d23058afa45566b51832
-
SSDEEP
24576:/0220C8uECnmUShKoWQST75l0ewPsP/cWUgYdjB/nCiXWT:7L9CIw
Static task
static1
Behavioral task
behavioral1
Sample
U prilogu je nova lista narudzbi.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
U prilogu je nova lista narudzbi.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
snakekeylogger
Protocol: smtp- Host:
mail.gpg.co.ir - Port:
587 - Username:
[email protected] - Password:
goodGod2024? - Email To:
[email protected]
https://scratchdreams.tk
Targets
-
-
Target
U prilogu je nova lista narudzbi.exe
-
Size
882KB
-
MD5
2e085ebf8dcf858b5f8e4fd12cd96b23
-
SHA1
d28c9c4555a704e82c020ebb1115aed8dd866e36
-
SHA256
62a97283872ab50c61ba23f69349b8244519cec93a00b7ee244fe58b9a685bbe
-
SHA512
9b430e40128e325d5dad45b1df423a3ff99a4e14f1f9c7abf238608b2ca892a060adb9d1ee67406752a8ec48d895097253882d8396b4d23058afa45566b51832
-
SSDEEP
24576:/0220C8uECnmUShKoWQST75l0ewPsP/cWUgYdjB/nCiXWT:7L9CIw
-
Snake Keylogger payload
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-