Overview

overview

10

Static

static

10

2728-24-0x...ry.exe

windows7-x64

2728-24-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2728-24-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    dd4e81c3777cea01d5768c2a5a0b1d8c

  • SHA1

    640c11d4ff3a8e9d4c36c42db59764ab236cda6b

  • SHA256

    ac1effed742becc00f738763d353c4857aa74737d782bad55132ec7af3b9b4b7

  • SHA512

    abe9476d960fe9c0fef708a7e569e6e6ba3ab851e2092a83079e66cf247a67a0685f69e27dd5460babbd5ad9f32a97ac10d715acaf5e2ee1bceeb529dc92e1c4

  • SSDEEP

    3072:HbLbu8cvR2glckCfC0CmC6CnCGC3CXCLC/CLC2CeCvCxC4C8C0ChCSCOCtC1CdCm:Tu8cZ2glUJ84b1t9EHb

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot6861634100:AAFDzKSOKvDFzUzm8fcQ-PEBL_vTn46CHRo/sendMessage?chat_id=6945274021

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2728-24-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections