Extracted

• • Target

    d1994701f17adae13d520dcac95143a6_JaffaCakes118

  • Size

    859KB

  • MD5

    d1994701f17adae13d520dcac95143a6

  • SHA1

    a300a063c0ff2d7d8fdfc5a02205a61836adfde6

  • SHA256

    4c0539b1d0a6fca3b802d94559079616acdb501b9544f4651cdf114cf7a6d700

  • SHA512

    d095968ed0605e6fe64bed986501ab4ac693d0ee3c199c5d870746fa059ef412833a74aa5b8b7bdb03f596ce58eacdd9047a42c04cb38458d7232c15d2be45ea

  • SSDEEP

    24576:Giz7knty6Ea5oBlQ9AHk5x4+QA4k3Kbog:Giz7kty6EuozQ9AEgj7k60g

  Score

  10^/10

  snakekeyloggerdiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2