General

  • Target

    JaffaCakes118_e7bb702825c89b2f4b4f9007aea956594896d9da5572331f2dc52e7274f2b2c7

  • Size

    152KB

  • MD5

    2a49422ad9bff4f587a760202174d9cf

  • SHA1

    5dbabaa2c46ef1086de0f7310b79a00e62602d66

  • SHA256

    e7bb702825c89b2f4b4f9007aea956594896d9da5572331f2dc52e7274f2b2c7

  • SHA512

    c50e610023640143a01339b038afc0057309fb112666dc3e1d3f10238d45364b20d75598f0682ea383293a2bbaef93ed4161e226dac178a9a79fb1afdaa43d02

  • SSDEEP

    3072:YFu/QTqOn4RBvx2IowFhxbCaUldwBRPnbYpPN2iJCQCv:xNfkIhbIlqvbiFJhG

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot5273807869:AAHdhflfgTbp8lRJ0nhI2erbz0crK0sBFlM/sendMessage?chat_id=1212297121

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_e7bb702825c89b2f4b4f9007aea956594896d9da5572331f2dc52e7274f2b2c7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections