Extracted

• • Target

    56db5a7b1e7589d53a3aff22480d05c02f87fc504b4f0e229ef38f3417ec5471.exe

  • Size

    1.0MB

  • MD5

    d69be8da083a01d8e8dbbcaae09508bb

  • SHA1

    2a93d64a9247fc29a2329fc50a885c6496db3d60

  • SHA256

    56db5a7b1e7589d53a3aff22480d05c02f87fc504b4f0e229ef38f3417ec5471

  • SHA512

    1aace401206344e31c6f9c1463a89ae786bc7a151b91bd546b8ddad5c70a1859f945ccc23f1448bd2592375678c6b8978ff41b496eb3134e3c7372e485db5f01

  • SSDEEP

    24576:IqDEvCTbMWu7rQYlBQcBiT6rprG8aZwGedJ:ITvC/MTQYxsWR7aZL

  Score

  10^/10

  snakekeyloggerdiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2