General

  • Target

    1748-21-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    f156b1f512591c8ae85edb9e4d95ce24

  • SHA1

    d8a88e601812b6a698296ab5941f2d751a28a2e1

  • SHA256

    2e64424386fa363890720824ae73e577f5ccd1191d1fa3fc3a4644fc8e4a7266

  • SHA512

    a187834a68aa7093790d8c811afa2b7aeaf89b204a6f0b2deba2528aa030be2aeaff59ec19308b777a46fe54a50194ead16ef6ed6c9663193252c19c66fb3cd6

  • SSDEEP

    3072:E99yINAgKjV545jbvk5Hbe7fMuJN07TwNumqoywiFzpa0b51DmWqwvcXmAgbY:fINAgKjV5Cjbvk5Hbe7fMuJN07TQQa0n

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot8183422874:AAGqcPtzxPUU2hrA-VMQ9I_vPVTL-SZlwpo/sendMessage?chat_id=2135869667

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1748-21-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections