General

  • Target

    2888-21-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    4ab0f1af9e66f4a5b1e95afbeb7dafab

  • SHA1

    7a118cc8045af61048e5d4c801a4cc88dfabd980

  • SHA256

    6bcede36b0458f3d3ceac02d51d0dec9566770c6336afa87679fed781c968524

  • SHA512

    87ba31bb3844e6ea82ea468a06a7470cfa2391390a23771be1dfc43c39351d215fd844682e2c5823d0294c3d0524d12e6dac98479971f572f03c8e34bc22be77

  • SSDEEP

    3072:it1PdhaH88ECg9sIADX3b5UEAdo7mW8wvcXb9gbY:IdUvnb8eb

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot7733074716:AAHPqUDZNcrQPzH_G03x5ppIOnkxZuz-Nyk/sendMessage?chat_id=7337843299

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2888-21-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections