Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1852-1343-...ry.exe

windows7-x64

1852-1343-...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1852-1343-0x0000000140000000-0x0000000140024000-memory.dmp

  • Size

    144KB

  • MD5

    bcf0840dc01afffee5beee693b32f7b7

  • SHA1

    c7511ea16e14a923b48d2f270a0300a09bac01bd

  • SHA256

    72c50b8ebe1aebb5b8b7fb6492a2d8626d987403296e170a580e9b55af37dc0f

  • SHA512

    7ec08fe63eee0f6af19c162b01f30423143d5281415dbef56379dd3b260ed88174cb98b8a7340e106aab52096e33d38cfdfee59d4da191798ba9881f9eebe5b1

  • SSDEEP

    3072:AbLbu8cvR2glJkCfC0CmC6CnCGC3CXCLC/CLC2CeCvCxC4C8C0ChCSCOCtC1CdCe:+u8cZ2gltbqbv/zb

Score
10/10
snakekeylogger

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot7719158406:AAGxGMuZ_5NEFP89HZrIghiOEjJFOaEE7ds/sendMessage?chat_id=1018401531

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
    snakekeylogger
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1852-1343-0x0000000140000000-0x0000000140024000-memory.dmp
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections