Extracted

• • Target

    QUOTATION_NOVQTRA071244·PDF.scr.exe

  • Size

    170KB

  • MD5

    d2f5552955ff07429b7218f4a4008cfc

  • SHA1

    56b59a77d25773d341aec87d268db3cde8649ea5

  • SHA256

    8f2049d7defe36c3970dc16ba924cc268cac0f9474ff5aca8d692d2b2b961726

  • SHA512

    94e14f03d068d8b3e9208aab419d86077524e0c1dc2fab924951aa1f26738fc1b470940056f1ca15acbf65028a1ccf43c0cadc7a538f2597c88eb32c173f4a6c

  • SSDEEP

    3072:EP95ONHGTxjx6CHj1GVUyZbdB8Ky48H95rnyPDtq4/tSpWA7HpguwC6gUd5:El5OexPjVFnSL1S4AzpguwC2

  Score

  10^/10

  snakekeyloggercollectionkeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2