General

  • Target

    2736-7-0x00000000000A0000-0x00000000000C6000-memory.dmp

  • Size

    152KB

  • MD5

    ddb4ec35bdfb566b305187b7667d9f16

  • SHA1

    afcb89ce34abdb28180f9def6442fcbcc683c0ee

  • SHA256

    d13e2abd4cdd640bf909204848b30398b24fe809abfb776d2f14542ca1f49a7b

  • SHA512

    d92636c1d544eab3366b0aa0e69c790735d5226f98152d301f759a2cf78a5246680306cd88f506876b37e68e54f62b04e11dbc744747bf42bca5077ea670d2c1

  • SSDEEP

    3072:o99yINAgKjV545jbvk5Hbe7fMuJN07TvNumqoywnb57/mWiwvcXmigbY:LINAgKjV5Cjbvk5Hbe7fMuJN07TLlbz/

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot7525931722:AAHv5VReYz4Tdv44qTVu1nWYViZknndh3TU/sendMessage?chat_id=7361435574

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2736-7-0x00000000000A0000-0x00000000000C6000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections