General
-
Target
2904-10-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
10e00f0d6d0443766b6426ec55ede1b9
-
SHA1
8528603df361dc5dd726999a19fbc88d59b3f756
-
SHA256
f19e1959882be3fc21c7e3df25d3231306f1a4fd5ee115a8837728bfbfa6ad26
-
SHA512
8c494ba5c662449e9b3e2203760dc00a0320a3c0bc3e808c71a325d397cb61a0724eaec8ed22addf80621e25d63f50558f36f83ec182ff4e51c8a29d0afd289c
-
SSDEEP
1536:3t1PMXQhaOXUggW81jGsQCT4EoTqMdswJUvub/BBsUQD3mW7tpiOWvcXbs:3t1PdhaH88ECg9s9Wb5Vm3mW73wvcXb
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot8142299351:AAFDTrtIpOoWWO5SiyZfI7QSQ2VJ59N65c8/sendMessage?chat_id=595808702
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2904-10-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections