General

  • Target

    2716-10-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    2231b2faa8ead3ef000cf0872738fd0c

  • SHA1

    b1053cec3bdb067d7c201164738521cb07fc4065

  • SHA256

    e1f0569cf66f54222455479d040267d4395708fb39b02092125252f467240c74

  • SHA512

    7d758640871bfef5c28de723a5e3d920585878766c43b5a8708c91a258835cf7051cdf0f460e2c9cd927e30cf93c22c25893293ad3afc5b0c9b800dd60447d60

  • SSDEEP

    3072:bt1PdhaH88ECg9s3fZDb54vmWFwvcXbkgbY:LdUp1bYlb

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot7719054034:AAHonYJDOpWskt5QdgdvYe662dLuhtscDqw/sendMessage?chat_id=6370711846

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2716-10-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections