Extracted

• • Target

    08a83016137949016b2aca6721f055b98b9d6bc5bc901764a8a6a7936aae8902.exe

  • Size

    70.0MB

  • MD5

    84b195869d13d9c15fe8836e94b2a842

  • SHA1

    496f11cb4a675b90e807c2a60c237346af8f030b

  • SHA256

    08a83016137949016b2aca6721f055b98b9d6bc5bc901764a8a6a7936aae8902

  • SHA512

    07af602f41407453f28b0db4c6f44471e313571b42548870c618226c1d247d410aa35bdbaad06b57787cee62ae3a2b36e2389cb19ed7a3cc1af7059a0a6f5c90

  • SSDEEP

    24576:1tb20pkaCqT5TBWgNQ7a9depk/7diNU36A:mVg5tQ7a9482G5

  Score

  10^/10

  snakekeyloggerdiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2