Extracted

• • Target

    8d7080d308ba79efbaeb115d95592afc33187264e22cbadc277cbc82d286f49a.exe

  • Size

    952KB

  • MD5

    8db80713ca849f28122978c35a9ade6b

  • SHA1

    9bc8cbb2a1ca3b567a508b0a8e4c4034c156ca9a

  • SHA256

    8d7080d308ba79efbaeb115d95592afc33187264e22cbadc277cbc82d286f49a

  • SHA512

    30ba121588acfcb7f75168cbc4c4217c44aa0b5ecbf1d775e023bbe07396fbfb2a16c53b34f72efae9c25ce0e6d4a1fb2c5bcf2b013f86beabe6598f6df4e78d

  • SSDEEP

    12288:rLkcoxg7v3qnC11ErwIhh0F4qwUgUny5QLZsmbMy9pZn2fCyYBWphL7BbpG:ffmMv6Ckr7Mny5QLZYQpoqrBWphnZs

  Score

  10^/10

  snakekeyloggerdiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2