Overview

overview

10

Static

static

10

1384-9-0x0...ry.exe

windows7-x64

1384-9-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1384-9-0x0000000000080000-0x00000000000A6000-memory.dmp

  • Size

    152KB

  • Sample

    240924-h2watsvgkn

  • MD5

    56985024e42a79f7cb451effb2c40574

  • SHA1

    a9be7ac520c5357e7de699e6503fec1c24b16622

  • SHA256

    a324d988d9434afd3b1c3b3cb73a242d33f03f85126372b18f8bbd24120fedef

  • SHA512

    4478a709abfcddb93f600f15a1c1aa38ad8c736950a1db264db4c13e473bb249494f59e2c898badec0d1ab52e088505fd96b3da94065f69ab4e19f28a14ed581

  • SSDEEP

    3072:oy4vdnls38SN7jaXHTib5AVnmWhwvcXmEgbY:Udls2H+b2VAFb

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:     smtp
  • Host:
    mail.emmioglu.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    Kaya2758+
C2

https://api.telegram.org/bot7824402550:AAF0zLhO0leZXvzGs8C_m31pnXq-KGoVm_I/sendMessage?chat_id=6651428318

Targets

    • Target

      1384-9-0x0000000000080000-0x00000000000A6000-memory.dmp

    • Size

      152KB

    • MD5

      56985024e42a79f7cb451effb2c40574

    • SHA1

      a9be7ac520c5357e7de699e6503fec1c24b16622

    • SHA256

      a324d988d9434afd3b1c3b3cb73a242d33f03f85126372b18f8bbd24120fedef

    • SHA512

      4478a709abfcddb93f600f15a1c1aa38ad8c736950a1db264db4c13e473bb249494f59e2c898badec0d1ab52e088505fd96b3da94065f69ab4e19f28a14ed581

    • SSDEEP

      3072:oy4vdnls38SN7jaXHTib5AVnmWhwvcXmEgbY:Udls2H+b2VAFb

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks