General
-
Target
2856-36-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
bf0c50f6e6204bf03c443b03f63a987d
-
SHA1
6cce3ac01ffdd72d5937a7d26b6affa9851d0243
-
SHA256
ac9e9253da990bdec8fe67634c1e704dd92c1bae0e08ab0f1a8517c3a9d2c6af
-
SHA512
73bfa8936a61be05b75af4faf4e2796b8ea556d3df745d6db43ee96abea39c00a7e34f099cb97c4087e819e5857365c2acaf7ba2024538449db1e8424e1088e5
-
SSDEEP
3072:r99yINAgKjV545jbvk5Hbe7fMuJN07TvNumqoyw8KHaKb5JmjmWBwvcXmxgbY:WINAgKjV5Cjbvk5Hbe7fMuJN07TLHHaf
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot6791427761:AAEq2ybkfsfQ4vvX1WVwRKr-rekQ-dk6jcM/sendMessage?chat_id=6443825857
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2856-36-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections