General

  • Target

    JaffaCakes118_47266d3b56ea83e115d0c7f187707f420100fec70531685257c1c71820cd0fa7

  • Size

    152KB

  • Sample

    241229-mpejrszjhw

  • MD5

    600bd1d81531bfa1a60715cd3964cb2c

  • SHA1

    72515082b6e9f2491fbeef983a1f48ee9e0d24c7

  • SHA256

    47266d3b56ea83e115d0c7f187707f420100fec70531685257c1c71820cd0fa7

  • SHA512

    e9a241df99f76e3f85309fafee22829fa15ede2f868af31ef0575d9bec47faa37ca282a25c1685923fe5baac3b617775850ffa456066a565f85828cc7d08750f

  • SSDEEP

    3072:iroWvZmMgml7BUn2G33NMbCuRF3wBWHnbY:ev9S2G3qbVHb

Malware Config

Extracted

Family

snakekeylogger

Credentials

Targets

    • Target

      JaffaCakes118_47266d3b56ea83e115d0c7f187707f420100fec70531685257c1c71820cd0fa7

    • Size

      152KB

    • MD5

      600bd1d81531bfa1a60715cd3964cb2c

    • SHA1

      72515082b6e9f2491fbeef983a1f48ee9e0d24c7

    • SHA256

      47266d3b56ea83e115d0c7f187707f420100fec70531685257c1c71820cd0fa7

    • SHA512

      e9a241df99f76e3f85309fafee22829fa15ede2f868af31ef0575d9bec47faa37ca282a25c1685923fe5baac3b617775850ffa456066a565f85828cc7d08750f

    • SSDEEP

      3072:iroWvZmMgml7BUn2G33NMbCuRF3wBWHnbY:ev9S2G3qbVHb

    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

    • Snake Keylogger payload

    • Snakekeylogger family

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks