Extracted

• • Target

    MV ANNA SCHULTE.exe

  • Size

    577KB

  • MD5

    69e89ef61b383149a0af933abe41b628

  • SHA1

    7e84f30ea43e7f5f4d035693b02983061ba423e0

  • SHA256

    65fd3e6981e71f5f189ed8496a037d74c05e41af482d0e9f9e649552866fd13f

  • SHA512

    731452336944e68d397f6ed63ab12c14bc85c18bdb715443008527a1b2e2ccdda1f87c0adaff2e52f9c9184b707cd2595c5ada435c8be880c706951e69d4084c

  • SSDEEP

    12288:ZbRKjP7neZvHStWDjJe4vroUD04OqTV9lQo1GIrrDQLRXPgt:DKjP7eZMWDjkMNlj15sLo

  Score

  10^/10

  snakekeyloggercollectiondiscoverykeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2