Extracted

• • Target

    JaffaCakes118_0170a07d6a246cf68c8539c2e457caf5b0b27fb7e618bb139f26c6538eb7be15

  • Size

    152KB

  • MD5

    4ea4643af9057de3ce3a3c4ff4996720

  • SHA1

    8d1c2e59a9cf142a96a7126f57c91cdac807a805

  • SHA256

    0170a07d6a246cf68c8539c2e457caf5b0b27fb7e618bb139f26c6538eb7be15

  • SHA512

    c434c17d58cbd0611c1383db38c187efe802b48e54464701c7142238dba9ebb6e4492ff5b39915388d84108d42fdf33432f1b793992e91b815620fb5df871453

  • SSDEEP

    1536:izwm5lAQKEGAj+kqDBwYD+l7fQIsMb/6qJ4DpiOWBWfn0Kcl:izwmgRAjJqDBzD+l7tzbCG6wBWfnbY

  Score

  10^/10

  snakekeyloggerdiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2