General

  • Target

    1796-7-0x00000000007C0000-0x00000000007E6000-memory.dmp

  • Size

    152KB

  • MD5

    2821e409796104f77654ca003644f64a

  • SHA1

    8bb87216dc238157da676628d68b0728d983d984

  • SHA256

    65117b870ff61c6ae93a9d1ea1042dadd6c7f29a7633ebcdac132b2604eb4ac9

  • SHA512

    fc62c6fa33368216e79d6a784361feb30f652fc4756dcad6366738d4a2ddc17bddb10f8c2e87fabdc786fc1792bb14bec4a4bd300d9e78896d7c5cf6f97ac990

  • SSDEEP

    3072:499yINAgKjV545jbvk5Hbe7fMuJN07TwNumqoywQrb7/ub5OZmW8wvcXmEgbY:bINAgKjV5Cjbvk5Hbe7fMuJN07TQ+/uk

Score
10/10

Malware Config

Extracted

Family

snakekeylogger

C2

https://api.telegram.org/bot7290518653:AAE8ef37d8xOmKETJqD9tnJR6y_FaNfYcSg/sendMessage?chat_id=7153546848

Signatures

  • Snake Keylogger payload 1 IoCs
  • Snakekeylogger family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1796-7-0x00000000007C0000-0x00000000007E6000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections