General
-
Target
604-22-0x0000000000400000-0x0000000000426000-memory.dmp
-
Size
152KB
-
MD5
acd528910a02bd532117f3673d2c78f8
-
SHA1
ee725c9f1844f1adf65471bf682f44e18212d269
-
SHA256
f54418e19f667abcdf51596e12b2c297e0e29aeb1f1e833547e32c54dfd2cde2
-
SHA512
2b7ea18bb00bf3041269e6ea922bce533cc42676a52c52e0194691c6f5c005bdef54018e1d27ae3afea040853ae1bf7448116e86a4f624f889ee0215cc837612
-
SSDEEP
3072:l99yINAgKjV545jbvk5Hbe7fMuJN07TwNumqoywBWp0b5vmWLwvcXmQgbY:YINAgKjV5Cjbvk5Hbe7fMuJN07TQjlbQ
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot8046970687:AAE86CdNXbS3TQ4T-piDLSQDOwzq2IS8a68/sendMessage?chat_id=5692813672
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
604-22-0x0000000000400000-0x0000000000426000-memory.dmp
Headers
Sections