Extracted

• • Target

    7855973b58ef009de33b592c971b329ef9b1fdbb4713f018f296b18fa8ef1ce1.exe

  • Size

    130KB

  • MD5

    6b7596289f29f22a235e2e7510e32f5d

  • SHA1

    5354b3f8f3d898bc1eb633c64b829274302b662b

  • SHA256

    7855973b58ef009de33b592c971b329ef9b1fdbb4713f018f296b18fa8ef1ce1

  • SHA512

    dd6861af43d15743bf0eebf76f1c619014599af223ee546925080b7b5a0106a950f30f3ab2b1283a3c5fa03aaeeef2c6fbbb8be607e51d800f79c372c6bf62e6

  • SSDEEP

    3072:6+XlnyGeZXVgLNIvTSrAjGb5wSMtsLowvxdSgbY:bnyTPTSrAjGbiibb

  Score

  10^/10

  snakekeyloggerdiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2