General

  • Target

    2704-9-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    01dd8a28dbb6480e8fe4b388fa5a3200

  • SHA1

    aa73ef91b569ea3f1a416cd45a159c07c7ef3882

  • SHA256

    9a725f0e023e8a8869e2a56236038c05f539e36437e3f8b41d3001f109f037a6

  • SHA512

    7105c6efc9a48e4fee8319e0f34baf1bd10996ce22848ced5ad2f5529a924800dcbffc74cb021f669b06357fa8ae82b98ed0a25a39f243d7ff387b06feeba892

  • SSDEEP

    1536:bt1PMXQhaOXUggW81jGsQCT4EoTqMds3fZ0+b/Bvk5pvmWrpiOWvcXbs:bt1PdhaH88ECg9s3fZDb54vmWFwvcXb

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot7719054034:AAHonYJDOpWskt5QdgdvYe662dLuhtscDqw/sendMessage?chat_id=6370711846

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2704-9-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections