Overview

overview

10

Static

static

3

QUOTATION_...DF.scr

windows7-x64

10

QUOTATION_...DF.scr

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd7a510af8b802be56498e0afc5228b92eceaf16761904d161340db81fd65994.z

  • Size

    1.1MB

  • Sample

    241203-dl6z6ssqen

  • MD5

    44bbf158bc5086b294dc8d8dbee961e2

  • SHA1

    a155edb87ab4a1f5c13ae500594310ea02ade61e

  • SHA256

    cd7a510af8b802be56498e0afc5228b92eceaf16761904d161340db81fd65994

  • SHA512

    881b1f329f9dc99e192aa4a0bd1b561338ed14fbfa001ecc1faed53579b66bc24650416723a508fb391f015740f81fdf47800da358e93538318118fac17019c8

  • SSDEEP

    24576:419zRvYdbu+8Re50xPj8JNvvFbkXC7CsCsauYWaBUUyE:4vRAn8QmU3+y7RA/

Score
10/10
snakekeyloggerkeyloggerstealer

Malware Config

Extracted

Family

snakekeylogger

Credentials

Targets

    • Target

      QUOTATION_NOVQTRA071244PDF.scr

    • Size

      1.5MB

    • MD5

      f0c321ce3c7ea909dd26b69eb89a7573

    • SHA1

      994122e053ef5382ca32c915e508bfb731a51c62

    • SHA256

      4fc9c28322c23ab1631519326db2062e8a67a3f8245d1c57413ca2ed64ca3ace

    • SHA512

      4dd4f9533a1a35a6e59e5576e6bd0aea7cc5fee6db55806b3fc1cb7f40b7bdbc0599f2a786dd36e109db0edf01ecfab80ab2431c284a57bfc44a61592db94212

    • SSDEEP

      24576:HXz0j4KeLr+IGNlxS/oDt+312HxzXDSQWN:HXz0js6IGNlxwoB+WWQO

    Score
    10/10
    snakekeyloggerkeyloggerstealer

    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

      stealerkeyloggersnakekeylogger

    • Snake Keylogger payload

    • Snakekeylogger family

      snakekeylogger

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks