General
-
Target
408-1097-0x00000000007A0000-0x00000000007C6000-memory.dmp
-
Size
152KB
-
MD5
eb2b04f91d03a45ac3bb90f2ad76da49
-
SHA1
e3f06e2d91da5bb25bdf94b34c0975c8ec3c6f63
-
SHA256
2132531e8248d2d3e1e9ef90b6a0fd6370ba1bffad9f206e3cdece71734f73d9
-
SHA512
4a7cb55b7cc27d3b6d2dcc73ef22ce8433fcf6885832a9a18edf14f5ece988cc49ac653c87bdf59966787fbe4b750fa280e9dc9e14b2818532ec47aabc9ae012
-
SSDEEP
3072:FvDdI8CN564+4V4v4z4G43424A464y4K4v4f4u4A494V4t4w4H4j4Y4Y4s4P4W4F:nIxNbqbpXb
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot7824077250:AAFcoqx_HuY2oC2csA-0G-hez0Tv78Sn08E/sendMessage?chat_id=7546472414
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
408-1097-0x00000000007A0000-0x00000000007C6000-memory.dmp
Headers
Sections