Extracted

• • Target

    MB263350411AE.exe

  • Size

    1.4MB

  • MD5

    608294e129ad08c8a09b69b9597bf382

  • SHA1

    d45e09a25a8f199046745a9fcdf37ce5b2213480

  • SHA256

    6ce381a9173d54b9556e152b98b931d8dbbd9adaa6b2ccc8d5b50320d7ce2b70

  • SHA512

    8ff9c82933fc7f3120c8941162ddbd4fbbd66b67975dd6831dcc678dc02abb6162833d10dc9a44458af7bd3f842ea68b1239eddec201f3144eb38a5861f1abe0

  • SSDEEP

    24576:c5EmXFtKaL4/oFe5T9yyXYfP1ijXdaJkpv4vNaX167/Hrget0bMfukHhMT:cPVt/LZeJbInQRaJkGvQF67vUckkuq

  Score

  10^/10

  snakekeyloggercollectiondiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2