Extracted

• • Target

    QUOTATIONSEPQTRA071244uPDF.scr

  • Size

    354KB

  • MD5

    ddcdb3b7d323ca5b5c08e66b99a69b7a

  • SHA1

    40ae0081d57dd4a36ac2706545b16422d87653e1

  • SHA256

    7973c501db329a55050ef4f68bf286f48af331d7a7580ec1a52cd14cdf959a3c

  • SHA512

    b5242d1cd1bec739036b71053bc9a345c4d99a3f0676a03def178b6728ca208876bb37510ff833182603ba57c92ad0fa604507920667f02ec7f0c7270cdc9fb4

  • SSDEEP

    768:4FMLUb2Drvae1dRx6ds8QZspSmQe21zEjss2S3g1Ircn0sspAEpq8bLyg1uMN0+d:4FJb2DHUzQZspSmQbkTpqELy0uyT+fK

  Score

  10^/10

  snakekeyloggercollectionkeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2