General
-
Target
2852-18-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
4e2629c619cc26de0763e50d9f1bdbae
-
SHA1
fd043333c6a2ad9c792b21d81787c167b29a4d22
-
SHA256
cf6b561b72fd45b609543edca604175b879d606ba968f243e9c7baf69bb82d16
-
SHA512
c3a25c92d7070878a2d048d611c6c81f265acf56f0ae45136f4c46709bfdc381aa77d4915552ef096055ef26b01ef6aa233066447b074da32e737391514e1d70
-
SSDEEP
3072:fvDdI8CN564+4V4v4z4G43424A464y4K4v4f4u4A494V4t4w4H4j4Y4Y4s4P4W4P:ZIxNutJNcAboa/EKkwhbt86b
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot7572469755:AAHCBLe3bEv-r8VSlR3NztVSSHz6JBpCC7s/sendMessage?chat_id=7207594974
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2852-18-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections