General

  • Target

    2736-3-0x0000000000090000-0x00000000000B6000-memory.dmp

  • Size

    152KB

  • MD5

    10f85cbb315d4acbbf07c6b78daaccad

  • SHA1

    07c668adc1253060ee543e60c07c857983b8ecdc

  • SHA256

    1d1d0c718ac5cc09fcb0967e3392c33a36b807e50efd22b9aeafc192fd4917b1

  • SHA512

    ca84648a0123c9a07b68518a18cd7c152b4ce5c88b0dea89b005b1a50f7bf122106674b23f28f5a41a87a11664e1d5b3e1ce269da07f1b0ffeaf7c67ea213578

  • SSDEEP

    3072:7XyD0pRrm2VIiNS/4hJw9ob5S8vgm9WwvcGmCgbY:G0rr1i9obcTLb

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:
    smtp
  • Host:
    mail.invesxteu.info
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    rwe87$%21q
C2

https://api.telegram.org/bot5361912293:AAGLRU8lOnvgedEVLW84nw6uJBR8KKRq6f4/sendMessage?chat_id=5103867363

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2736-3-0x0000000000090000-0x00000000000B6000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections