General
-
Target
JaffaCakes118_3a6312d7bf1d98f606ae08c89469c2f485856f0bb0dd88ba796af03b969ec995
-
Size
45KB
-
MD5
75a3cead93a483c5a01e6bc451e9da04
-
SHA1
7049bafdb43b0f01cece393e7aee6be88ca5bcc6
-
SHA256
3a6312d7bf1d98f606ae08c89469c2f485856f0bb0dd88ba796af03b969ec995
-
SHA512
d29eecb292d4e0436bba2fcc0ab2d5aa64dcb5202dc4ca4cd9dfd7050a6e21800e80627dfc60713d7bc07d57489e3ab1be6ab966133af2551189f468f15446e7
-
SSDEEP
768:WAT1PdetItxuVKY8g9KQmNYwG1wmHI8BwWKScp6Gi8yCd9/35EbsA90qkZDPRMv1:WAT1OIHuVaEmdTmoTWKScpbi8yC/v5Eb
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
Credentials
Protocol: smtp- Host:
webmail.tomic.ba - Port:
587 - Username:
[email protected] - Password:
123456 - Email To:
[email protected]
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_3a6312d7bf1d98f606ae08c89469c2f485856f0bb0dd88ba796af03b969ec995
Password: infected
-
7943a35a82cdeeedd3d1271bf449fa554665ff38fc07b17a5067385e1ed0724c.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections