General

  • Target

    2652-31-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    60cae6de30b5dcecdda776c8aa0da860

  • SHA1

    3ada7b5ec8756fa6cbf9311bd7ad9aaae7ea9658

  • SHA256

    68d74328570e13cfe59e230c90b3595964f59d4b3157818c85b205d6b4bcdfbd

  • SHA512

    ce534995367b7c6f921bed5e37c38d05048d5493acbe17250a87444f90dc15eeeae18269afb549dc7073b230fa6e085b5742691cf7b934159f383bf87fe27029

  • SSDEEP

    3072:h99yINAgKjV545jbvk5Hbe7fMuJN07TwNumqoywrkcqtOdb5HpmWQwvcXmMgbY:cINAgKjV5Cjbvk5Hbe7fMuJN07TQlNPX

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot7570158401:AAGzmritmTT3Z0Z77i4ThJMCq3NzbjqeNpo/sendMessage?chat_id=7225431807

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2652-31-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections