Extracted

• • Target

    b012611db4d85ab649694b49da524c93_JaffaCakes118

  • Size

    799KB

  • MD5

    b012611db4d85ab649694b49da524c93

  • SHA1

    3be90d69951a67bf5b0989a719a92a34d2911759

  • SHA256

    d7aee746a8b51b7dbe540fee6104ce9122227401d2dda01449d1b016e189d147

  • SHA512

    27560ec55713eadf10f3e2fc817471df35c2dac0f8254ac00890c5e4f157b1d82367efd0e8efcaf627352ed92ea66cd543c77140277c7fbaea954e8ecefa611a

  • SSDEEP

    12288:WgkCbQXAt2NjFmzPCnEGS02VDoVqiH4aQ6oSnWUAVvPIq5gHnGY:WtC0QMNj3w0YmqiYx6ZWU+vXgm

  Score

  10^/10

  snakekeyloggerdiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2