General

  • Target

    2320-7-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    af23b9f2fdb6fb334d3965bd47bd2717

  • SHA1

    b22b68c90409549e0da5302e55d1dffe04d63d66

  • SHA256

    0702867a0d9946d9bc7e1f40072e44be4d81ffa7467b0b563555e34f26fad84d

  • SHA512

    63060b5094b1764dd0cf8312112eb469eab1f9fbdccb8c962986db2a0e7a14b5237a29e6ae827f6a15d0cee15c71c958c7068f976e95940ebd72f9206d640b31

  • SSDEEP

    3072:W99yINAgKjV545jbvk5Hbe7fMuJN07TwNumqoywNM7ib5wmWSwvcXmEgbY:xINAgKjV5Cjbvk5Hbe7fMuJN07TQLNbM

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot7541499630:AAESy1nWQ4poIra9UxdBRC70wQqWdJNny3U/sendMessage?chat_id=6557702940

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2320-7-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections