General
-
Target
3028-31-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
757361f0954f982eb1b32c99d4860186
-
SHA1
dec7dff01da28fa47b0aefadf3a1206217a12d41
-
SHA256
e5ed277e10175f5cfae8e7080e409fd8a12f0852eef34f9b456344bedd0072f3
-
SHA512
82c723ea01d014e9213fc0fdcdf4b76fb5b6d3103436d6a9af63d982f289b45400a569e68bab458b45b4636b2f884c1b6372017270d033b3a49e760a19feb219
-
SSDEEP
3072:a99yINAgKjV545jbvk5Hbe7fMuJN07TcD4g6UQ/eK2kBPb5jgFmWiwvcX3rgbY:tINAgKjV5Cjbvk5Hbe7fMuJN07T7jblu
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot7013350856:AAEMW-L9OH6xJPBSHadxtnabC3gFbH_e250/sendMessage?chat_id=7239159003
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3028-31-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections