Extracted

• • Target

    hareketleriniz.exe

  • Size

    4.9MB

  • MD5

    dd88e4c3f9247626b701977b7238e7a6

  • SHA1

    8a30ce8360570fca3b7b5913742466d06491cbf4

  • SHA256

    fcdde52d79cc0b51fa86a39b6ebd16d007733b0466c71a8fec91b750817c8e13

  • SHA512

    9373dfb5925492230b944433c9d4292d09655cd3dd4f820857a7ebcc35fd37e0d44f8cc5f9067d7e894c964e86ae7b589e118fe4d2b4c3743765b9a216adf333

  • SSDEEP

    49152:FUXWOBwOnRw23SlF+E/XShBvG3SHFDuGpY0NAfdXsYx4nVvIwtDajQao9TDOrbhc:FUJwOnRd+ShBQGtHNU31nOiGR

  Score

  10^/10

  snakekeyloggercollectiondiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2