Extracted

• • Target
    8e95907c0b65f2f882de4d6bf69e0b62bf6ea0be2a87e5cc0ffa535fad492264.exe
  • Size 529KB
  • SHA256 8e95907c0b65f2f882de4d6bf69e0b62bf6ea0be2a87e5cc0ffa535fad492264
  • MD5 26a0ffe8ed7645b7136ed56213b1a176
  • SHA1 69999ef2af86ac2a4f435483a52deb2eb54e3bba
  • SHA512 8c2c1fe5e9b8a70f660d63342dc99d4d959b94fb8223ffd9d2371b86f8c6822275ac9d374a5b35e6abde0d8c63b8a05c92c109155f35de39beb70a652ee1aa5e
  • SSDEEP 12288:jxzveN6NtGc3eoz2ZB2lFm2juJbUUcBgThvNC0D9:jxzva6NEsziDlUUcBgrC
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  collectiondiscoverysnakekeyloggerkeyloggerspywarestealer

  • Snake Keylogger

    Keylogger and Infostealer first seen in November 2020.

    stealerkeyloggersnakekeylogger

  • Snake Keylogger payload

  • Snakekeylogger family

    snakekeylogger

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2