Extracted

• • Target

    CV Paula Galarza..exe

  • Size

    787KB

  • MD5

    8a80513ce862e3f47158dfa82e208965

  • SHA1

    9c68e9526062abd665666f10e0520850bf19727e

  • SHA256

    8aa17384f8bbf04f91228b1e1a58f22fb086bd91d5f1803d69c710607a2e511e

  • SHA512

    5e90bb9a1df25d6c202b720c9325bc122095570287876612843fd8347fbc418444240880fe9cb7d36a10500f16e7e3e2fe0dcf429b9c664a9ba2fb63b6df0374

  • SSDEEP

    12288:9eYTBDtQFWKDvedwIiyNGm3ds26oECTBEHwg5b3Pz0CapC:nWFbvedJrNBmAfTOh5b3Pc

  Score

  10^/10

  snakekeyloggercollectiondiscoverykeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2