Extracted

• • Target

    7eb43262ce13c572094b539a4a737635_JaffaCakes118

  • Size

    655KB

  • MD5

    7eb43262ce13c572094b539a4a737635

  • SHA1

    3ff7427c7d8d3a77b868d2433710246175702bf1

  • SHA256

    5cbc6e79779eda51c3c6f722ba55301b24e458142bb570b82a7c06e79a304697

  • SHA512

    157424d506f83daafbecb50e813fbc217e9c48b40a89d1af8a5839c7d763eb47eb4e599a0c9b22f10013849495fdc7dac5f9f379729968d1e2c9b6b89976de61

  • SSDEEP

    12288:D2TlBBfGWkLKUhSoszUlAhtG7QaKT7YdDtgQqUHSJkbSuCMDroz5YmXdIlmShwc:D2ToByg678Hhi2Ci3lV

  Score

  10^/10

  snakekeyloggerdiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2