Extracted

• • Target

    e11532b77bec09e8a74fa02135de0a9e00adfc73956027e436eb7954c5548756

  • Size

    100.0MB

  • MD5

    744720a3be6bbd237c8fe1e119d04638

  • SHA1

    7182439de1107effdc51f7ae73c44588e6a90970

  • SHA256

    e11532b77bec09e8a74fa02135de0a9e00adfc73956027e436eb7954c5548756

  • SHA512

    1ab6fc386397b83feba691d758df03583c6ca1b3b3570929b988738b11d1c454e562874095f4f740352cbe4def554a942fa5b61b6f274b54f08e2a3171f4e548

  • SSDEEP

    24576:oAHnh+eWsN3skA4RV1Hom2KXMmHa2kIXhDnPa5:vh+ZkldoPK8Ya2kahDn4

  Score

  10^/10

  snakekeyloggerdiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2