Extracted

• • Target

    4584-1088-0x0000000000700000-0x0000000000726000-memory.dmp

  • Size

    152KB

  • MD5

    33ef021371983b45b3eafb05b7439c78

  • SHA1

    1d63d12764ba495e628490f53fa909903dce5033

  • SHA256

    92488f6c72170aa5f73e00492ec036261ef480141253d7c3b3a0847d59bea32f

  • SHA512

    a15dae159ea507dd9580411198c8df9f36b3ea1e2bebfa5a72f56bde9f5bd1e52ef324378c61deb75e406a597cd93ca2ef2b0e8b5159ceac4cbd7994af51d33a

  • SSDEEP

    3072:HvOWfKC/de3WtJMPlWmM2vo2wC18OGbYUCp8nsYFwv8YEgbY:7ffHtJmWmM2vo2w1OGbSBFb

  Score

  10^/10

  snakekeyloggercollectiondiscoverykeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2