Overview

overview

10

Static

static

3

download (2).exe

windows7-x64

10

download (2).exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    download (2).dat

  • Size

    224KB

  • Sample

    250102-h4rqeszpgs

  • MD5

    4f353b81eea8c26c55bc7bae562f0633

  • SHA1

    c7a74ce48e523700326cb7892d7777582e0901ca

  • SHA256

    5130bbfc64ba560cbc429ef3add6b9d3dbbc745e33a9313bb5a8988d45658d54

  • SHA512

    2e95ee8c7f17704641b8df3056ec5348fc0529971a365900e5546e757feb22d41723985dc44301955ee3341c1c1f93b2bbf2fbd658d20e8b08685dbc5aaf18b5

  • SSDEEP

    3072:eDKW1LgppLRHMY0TBfJvjcTp5X3indLnVQ4fr26dLVPZG2L6gbYu:eDKW1Lgbdl0TBBvjc/Yvf60fGOb1

Score
10/10
snakekeyloggerdiscoverykeyloggerstealer

Malware Config

Targets

    • Target

      download (2).dat

    • Size

      224KB

    • MD5

      4f353b81eea8c26c55bc7bae562f0633

    • SHA1

      c7a74ce48e523700326cb7892d7777582e0901ca

    • SHA256

      5130bbfc64ba560cbc429ef3add6b9d3dbbc745e33a9313bb5a8988d45658d54

    • SHA512

      2e95ee8c7f17704641b8df3056ec5348fc0529971a365900e5546e757feb22d41723985dc44301955ee3341c1c1f93b2bbf2fbd658d20e8b08685dbc5aaf18b5

    • SSDEEP

      3072:eDKW1LgppLRHMY0TBfJvjcTp5X3indLnVQ4fr26dLVPZG2L6gbYu:eDKW1Lgbdl0TBBvjc/Yvf60fGOb1

    Score
    10/10
    snakekeyloggerdiscoverykeyloggerstealer

    • Snake Keylogger

      Keylogger and Infostealer first seen in November 2020.

      stealerkeyloggersnakekeylogger

    • Snake Keylogger payload

    • Snakekeylogger family

      snakekeylogger

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks