snakekeylogger | 5a6f48061ceebc2c6862669061b00b2f624199b62eea18764563689e91c6f1e0 | Triage

Submit
Reports

Overview

overview

Static

static

5

5A6F48061C...E0.exe

windows7-x64

5A6F48061C...E0.exe

windows10-2004-x64

Sharing

General

Target

5A6F48061CEEBC2C6862669061B00B2F624199B62EEA18764563689E91C6F1E0
Size

1.2MB
Sample

250103-jnradsvkez
MD5

2fb508828902f9323b9005f6e40e631c
SHA1

a40ed5a73214ebdd6a4e8372b39c379ca098c918
SHA256

5a6f48061ceebc2c6862669061b00b2f624199b62eea18764563689e91c6f1e0
SHA512

0008c53d2a2df6b18b43889458eb01a363b4a3b1d2446dcc8b6f214fdc3f6e0ab036957bac9ce25fd759bece756e009f9903eec37ab9af806445122c5b62d1c0
SSDEEP

24576:oqDEvCTbMWu7rQYlBQcBiT6rprG8aoszJGDXtgHt:oTvC/MTQYxsWR7aoN6

Score

10^/10

snakekeylogger discovery keylogger stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

5A6F48061CEEBC2C6862669061B00B2F624199B62EEA18764563689E91C6F1E0.exe

Resource

win7-20240903-en

snakekeylogger discovery keylogger stealer

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

5A6F48061CEEBC2C6862669061B00B2F624199B62EEA18764563689E91C6F1E0.exe

Resource

win10v2004-20241007-en

snakekeylogger discovery keylogger stealer

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  5A6F48061CEEBC2C6862669061B00B2F624199B62EEA18764563689E91C6F1E0
- Size
  
  1.2MB
- MD5
  
  2fb508828902f9323b9005f6e40e631c
- SHA1
  
  a40ed5a73214ebdd6a4e8372b39c379ca098c918
- SHA256
  
  5a6f48061ceebc2c6862669061b00b2f624199b62eea18764563689e91c6f1e0
- SHA512
  
  0008c53d2a2df6b18b43889458eb01a363b4a3b1d2446dcc8b6f214fdc3f6e0ab036957bac9ce25fd759bece756e009f9903eec37ab9af806445122c5b62d1c0
- SSDEEP
  
  24576:oqDEvCTbMWu7rQYlBQcBiT6rprG8aoszJGDXtgHt:oTvC/MTQYxsWR7aoN6
Score

10^/10

snakekeylogger discovery keylogger stealer
- Snake Keylogger
  Keylogger and Infostealer first seen in November 2020.
  stealer keylogger snakekeylogger
- Snake Keylogger payload
- Snakekeylogger family
  snakekeylogger
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

snakekeyloggerdiscoverykeyloggerstealer

behavioral2

snakekeyloggerdiscoverykeyloggerstealer

© 2018-2025

Terms | Privacy