General
-
Target
2384-28-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
b4a60b225eca56a200d2e5b440f9b339
-
SHA1
fc4dd2c242a1a87aee896340947ac6a979e52fc6
-
SHA256
ec009cbe1add3d266819663f7015fe814ded5be8c3ebda68576577ed90612435
-
SHA512
3a2d3f82a8c24f9e59bfa615dc4c60971b4a645a5db0e04694553f4090c3e0d40f6815f84b77b927d5c7f0ec139d5f9834d8fb423c233c4d1f7303672895d3c2
-
SSDEEP
3072:+99yINAgKjV545jbvk5Hbe7fMuJN07TvNumqoywljb5LmWowvcXmlgbY:pINAgKjV5Cjbvk5Hbe7fMuJN07TLDbx
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot8071929169:AAFUKNAcxQ6ezyCHGQASc7PxQv_smeADnUQ/sendMessage?chat_id=5985897351
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2384-28-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections