General
-
Target
1972-12-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
ba7ed03911f603d0bb2d284d61b95916
-
SHA1
5dc6edcf3b60a7b10448f6953e929cd86be61402
-
SHA256
d3d03504df3629f9503540ac68bb6d5c48488c9d1e6041bffecb9e1fb54975da
-
SHA512
44b89e124f6e0de0ebc0b138a0405ce87158c40e7dbd7be62678b4191c2117d088649f9fdcac717d526df75d6c682b91759ed2c36c2bbab14e5a689a19d7dd90
-
SSDEEP
3072:D4/sgxYfRz5RnD1mz9qWccTf6g03ajWb5KapfsLDwvxWZgbY:UxYfRz5RnDYILbPp2Sb
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
Credentials
Protocol: smtp- Host:
dot1n2002.servwingu.mx - Port:
587 - Username:
[email protected] - Password:
34(fgj5n]hjE - Email To:
[email protected]
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1972-12-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections