General

  • Target

    f3148c42747ad5d0908dca44309881e9ffda509872db2cb8a2ba24c294b45660.exe

  • Size

    774KB

  • Sample

    240905-cc247asbrd

  • MD5

    ec00238379ba4a3705b5545ffac93861

  • SHA1

    e4703502bf39562223c9ab75843f32b0e0ae234b

  • SHA256

    f3148c42747ad5d0908dca44309881e9ffda509872db2cb8a2ba24c294b45660

  • SHA512

    fd4057c9d900cdfdae0e442ea532c14b4e82d92b3afc018ebe10dbcf9050e4f8e1a7679b6746bdbc4d00d69e59f0e46c01e39c14a200d11ef015a4a5eaf93e3e

  • SSDEEP

    12288:1AAvGb9XjilseLYBhXrMeT7e7yIw9LNg9ZunLPeIPWpW+tLpDHz+m/:NGes9re7lw9Wr8xWpW+Zdz+m/

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot7475471205:AAHls0lKqV6CKmVf2YvymwxRo9_YJUFcRys/sendMessage?chat_id=6429788096

Targets

    • Target

      f3148c42747ad5d0908dca44309881e9ffda509872db2cb8a2ba24c294b45660.exe

    • Size

      774KB

    • MD5

      ec00238379ba4a3705b5545ffac93861

    • SHA1

      e4703502bf39562223c9ab75843f32b0e0ae234b

    • SHA256

      f3148c42747ad5d0908dca44309881e9ffda509872db2cb8a2ba24c294b45660

    • SHA512

      fd4057c9d900cdfdae0e442ea532c14b4e82d92b3afc018ebe10dbcf9050e4f8e1a7679b6746bdbc4d00d69e59f0e46c01e39c14a200d11ef015a4a5eaf93e3e

    • SSDEEP

      12288:1AAvGb9XjilseLYBhXrMeT7e7yIw9LNg9ZunLPeIPWpW+tLpDHz+m/:NGes9re7lw9Wr8xWpW+Zdz+m/

    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

    • Snake Keylogger payload

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks