General
-
Target
2552-14-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
cd7f92bad803c22ac64fb8fff10e74a7
-
SHA1
8341268a5d4cf2385c293950d2b7f6673532f146
-
SHA256
6c97dc566365cb3e659290cc7861a43420da894a4c1a13ba9658a256b567c16c
-
SHA512
3eca313a381ba6f98959fe8a4ab6085a19191c546d808e31cf9e6e04855d3489c40159fe98b9268393159500ba3f2cbe8d2d0961a345911ca820bf55f2f3a309
-
SSDEEP
3072:lvDdI8CN564+4V4v4z4G43424A464y4K4v4f4u4A494V4t4w4H4j4Y4Y4s4P4W4P:HIxNutJNcAboa/EKkwhbt86b
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot7572469755:AAHCBLe3bEv-r8VSlR3NztVSSHz6JBpCC7s/sendMessage?chat_id=7207594974
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2552-14-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections