General

  • Target

    1760-3-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    0a87946767eaf40872905b3564e801da

  • SHA1

    abcce5eeb6c9f5d263e21712b3dfe0fcaaeca0ae

  • SHA256

    5da553b5870b103bdab1965e4b28a564a88aeef87c0ddd908bbafc42c30f9b38

  • SHA512

    1a8b1f451165c71c3492a303b8189f2d61a4cb7d9c0124085e6e9f3ddb65cd1d9e2cfd85458f2e79cb21b9b3bd734f8211316280d2225dcd0444ce47b1332689

  • SSDEEP

    3072:XCESyASvXF0r+10UFkqAib5SsLBwvxdKgbY:MyA+sibmTb

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

Credentials

  • Protocol:
    smtp
  • Host:
    mail.invesxteu.info
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    dN2lI9vN9y

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1760-3-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections