Extracted

• • Target

    SwiftCopy.exe

  • Size

    965KB

  • MD5

    0739db0558a77ca5b721c55d8f8d4028

  • SHA1

    38117b7ace7659fb83666b396d786910930460f8

  • SHA256

    9d09d34561d6de1f32ed4af12280fbddb2ab7864cedfdf7197ee269bfc7bd321

  • SHA512

    519f4c63079486f2b97ae93450e2a2d94b250ff2ecb8e5794249d6e7e5553f0636aeca0b56abadf01aeee0e90fb8068e6d85c2206cb491f95cb89feea4c40941

  • SSDEEP

    24576:au6J33O0c+JY5UZ+XC0kGso6FagnbALBLFvtiWY:su0c++OCvkGs9FagnbsDY

  Score

  10^/10

  snakekeyloggercollectiondiscoverykeyloggerstealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2