Extracted

• • Target

    Transferencia.exe

  • Size

    664KB

  • MD5

    3f6d217364b17266bb888620c490260a

  • SHA1

    12aa2706b4b7a7ceca604ef8e440dfa2ba2925b0

  • SHA256

    ff5c91650db7948dab64599a77241952f1e81dbd10201418c90a1be3f3ec94f1

  • SHA512

    6cc7a8bb4fc0b46778f9a352fdf9e164c730c89a27339a59e1a999efa8bebdf1c265a76e06d9e9bcbcbee02a28145c465071cdd1c5588ccb6cedc58e548a1b82

  • SSDEEP

    12288:uM3ZJLcWeC4b3OuFW1D5jkiUr6Vz9hDTl02YCdhNxJpvgyglrh:LnAOuQ5jZUr+jTQCxxXvnIh

  Score

  10^/10

  snakekeyloggercollectiondiscoverykeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2