General

  • Target

    3596-1125-0x0000000000530000-0x0000000000556000-memory.dmp

  • Size

    152KB

  • MD5

    5c5f6662595e8dc479ab13884bfc72d4

  • SHA1

    55697a4639ff66d145375b52229abe138b1783ba

  • SHA256

    1c843a86bd90045e43b8bfd78d4dafa69a1acac40a8999bc487861b0fdb813df

  • SHA512

    ccf1db42a47ce267c277dd2b2a7b30cf2bba949037f7a16d4780a294d58022d8edb8d4c318a1212fc3f102254df79dc5ab6555a3d2a0febb2617104ea8372a13

  • SSDEEP

    3072:w99yINAgKjV545jbvk5Hbe7fMuJN07TvNumqoywyJ0Z0b5vjQtvmWpwvcXmggbY:jINAgKjV5Cjbvk5Hbe7fMuJN07TLE0ZY

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot5945022662:AAH3tNDq2H4t2_2yAxq__TOQa3RMNliwRjM/sendMessage?chat_id=6147569474

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3596-1125-0x0000000000530000-0x0000000000556000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections