General
-
Target
exam_task5
-
Size
1.1MB
-
Sample
240713-psmqnashqg
-
MD5
56c2e79168a27d15ada4499a0c3feec9
-
SHA1
7797ea5dc3cd1191d5ebb051f62f79849b6835ce
-
SHA256
0a6f0b8ace6e7a43bc35e80cee2d7769c4ef3a994b4d38cd4bf7978dfc97c7e8
-
SHA512
426625985be91c443716a9f68ffdc6667cc5129e2ee4ef554472ab43f8c9a3c037dbc8d9591d99827b0f7fc27c22fb9e793c4a3a947158ca2866df52b166e0f6
-
SSDEEP
12288:agdVYTTZEcmgH5KqlyGNb5AdER2wOBgNAXrO50Zx0k3eOGIRl6QJn0WpoJpx5oCH:agdVYhHQqcE2BbX/QCc2VUprodc
Static task
static1
Behavioral task
behavioral1
Sample
exam_task5.exe
Resource
win10-20240611-en
Malware Config
Extracted
snakekeylogger
Protocol: smtp- Host:
mail.gbogboro.com - Port:
587 - Username:
[email protected] - Password:
Egoamaka@123
https://scratchdreams.tk
Targets
-
-
Target
exam_task5
-
Size
1.1MB
-
MD5
56c2e79168a27d15ada4499a0c3feec9
-
SHA1
7797ea5dc3cd1191d5ebb051f62f79849b6835ce
-
SHA256
0a6f0b8ace6e7a43bc35e80cee2d7769c4ef3a994b4d38cd4bf7978dfc97c7e8
-
SHA512
426625985be91c443716a9f68ffdc6667cc5129e2ee4ef554472ab43f8c9a3c037dbc8d9591d99827b0f7fc27c22fb9e793c4a3a947158ca2866df52b166e0f6
-
SSDEEP
12288:agdVYTTZEcmgH5KqlyGNb5AdER2wOBgNAXrO50Zx0k3eOGIRl6QJn0WpoJpx5oCH:agdVYhHQqcE2BbX/QCc2VUprodc
-
Snake Keylogger payload
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-