Extracted

• • Target

    Week3.exe

  • Size

    812KB

  • MD5

    5302477a2c210083be8d25280a1d27cf

  • SHA1

    7d9cfcfe09c52303e9ab741353c06e014364cdd6

  • SHA256

    c40b21462fa3c5ebbed41befc33078f7453e4ed5e2594a815103c1efe70d6327

  • SHA512

    85be08716fbe5b9503dd1ce6ab42796c14ddc3bf60b4f5e71f68e66cdc72bbd47e32181ceb029f9cc0e3d8cee77ab4b29ed3305546fde326f4a3763ada223046

  • SSDEEP

    12288:zWmfDfxt7J0iJKfJDbV5wPw2a7iLv1/L5le289QgM:v2RfJW1Ciblvng

  Score

  10^/10

  snakekeyloggercollectioncredential_accessdiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2