Extracted

• • Target

    94226064206b06a63579726747ae6900e6b6335b03b4bb00baf6f9cb0cbb1318.exe

  • Size

    1.4MB

  • MD5

    2841a5211dd5eee5bcc3c3048b5d00da

  • SHA1

    a3de07870057a11804c108ca3848b7cf28adbf6b

  • SHA256

    94226064206b06a63579726747ae6900e6b6335b03b4bb00baf6f9cb0cbb1318

  • SHA512

    9b5941df181ab041ca138239c7737624e4cfea5197c75bfc506e8eeedca583804e3da439fd5759fe32d450e5691e638e4400bf8be6a6788fc7e84a7eed0f538f

  • SSDEEP

    24576:fueTHvQfTvBuYfkWBqhaHvc/OR9rJaSIUfdr2HWkwtG7pAa2StwY:fjTofT7BXFxa5

  Score

  10^/10

  snakekeyloggercollectionkeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2