General
-
Target
1388-1360-0x0000000140000000-0x0000000140024000-memory.dmp
-
Size
144KB
-
MD5
61d7fc56992f6ef25bceb241f00a09ea
-
SHA1
ec26bad785889f726c936dc080384fbc1f3fd781
-
SHA256
1da91192e34e3a227e7b2e3cae4dce99c36fb2f8f1f62a922966937d6ae22f82
-
SHA512
85e4b95fcfcea2912805213867834642343aeaf4fddfdc3ff9faa08cd0e89f2787efd44924bb3f6e795bf037ecbd98772f5e841bb37aab9ecdfaac5ccbda838f
-
SSDEEP
3072:zVJg2V2QyG3YZvp3UFbcrwxt5RMVbqwE5K1Kbv4XysDor2vrkp72qbt2i+mWowv5:I2V2QyG3YZvpUFbcrwxt5RMVbqwE5K14
Score
10/10
Malware Config
Extracted
Family
snakekeylogger
C2
https://api.telegram.org/bot7016021549:AAFFED6mrzzYMktPd78AMWdi_nAN7SC1JJY/sendMessage?chat_id=1018401531
Signatures
-
Snake Keylogger payload 1 IoCs
-
Snakekeylogger family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1388-1360-0x0000000140000000-0x0000000140024000-memory.dmp
Headers
Sections