Overview

overview

10

Static

static

3

b78b4f9573...18.exe

windows7-x64

10

b78b4f9573...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b78b4f95731b3ee7d1c88d465b692e3c_JaffaCakes118

  • Size

    734KB

  • Sample

    241202-jg6fqs1mfm

  • MD5

    b78b4f95731b3ee7d1c88d465b692e3c

  • SHA1

    f129f7d4970676d244c1bcdf00c2c49fa9b84585

  • SHA256

    d0dd1d13bd56e1fc574d1680ac93fea883f59ef8e4e94ebf5ef8769079fe2e2e

  • SHA512

    83c6e1efa54545ef69f79b4d6b626f70d29a12377f1b479a0ee16169fcde6ceae0f4e7d3424e90697af64714a70269b7613d6c0f2a096b2b7d962c04f2cdf4af

  • SSDEEP

    12288:UhCS3GUDHsCOFV4GzYltStyCfOFBkU17lcylSyciKg2cH4xluArSZwUJAvmQDPi6:UAS3GI1PtStmkwSrihf4xluA0AvBPiBw

Score
10/10
snakekeyloggerdiscoverykeyloggerstealer

Malware Config

Targets

    • Target

      b78b4f95731b3ee7d1c88d465b692e3c_JaffaCakes118

    • Size

      734KB

    • MD5

      b78b4f95731b3ee7d1c88d465b692e3c

    • SHA1

      f129f7d4970676d244c1bcdf00c2c49fa9b84585

    • SHA256

      d0dd1d13bd56e1fc574d1680ac93fea883f59ef8e4e94ebf5ef8769079fe2e2e

    • SHA512

      83c6e1efa54545ef69f79b4d6b626f70d29a12377f1b479a0ee16169fcde6ceae0f4e7d3424e90697af64714a70269b7613d6c0f2a096b2b7d962c04f2cdf4af

    • SSDEEP

      12288:UhCS3GUDHsCOFV4GzYltStyCfOFBkU17lcylSyciKg2cH4xluArSZwUJAvmQDPi6:UAS3GI1PtStmkwSrihf4xluA0AvBPiBw

    Score
    10/10
    snakekeyloggerdiscoverykeyloggerstealer

    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

      stealerkeyloggersnakekeylogger

    • Snake Keylogger payload

    • Snakekeylogger family

      snakekeylogger

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks