Extracted

• • Target

    CV Francisca Esmeralda.exe

  • Size

    944KB

  • MD5

    fcd5c0b5572e5ba431a5f6b2dabe5503

  • SHA1

    2a5297ed0f5724106d8a3b0606ff9cf4dc6c0e16

  • SHA256

    48ad85fc3ab4ab11d497f78cb86f871c9aa8ce62e17166df2a806fcf7b9c291d

  • SHA512

    b2c19437a2c398f2af2cf503a341a18b19b16143ad4f8a6d8d08629e3e07e0eb86e0ac1048ff0cbc8f3ce445298354d5548a3dff9d34cf72ccf5562122d3208f

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaC5c0KAdiSC+Da:7JZoQrbTFZY1iaCa0tdiwDa

  Score

  10^/10

  snakekeyloggercollectiondiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2