General
- Target 648-13-0x0000000000420000-0x0000000000446000-memory.dmp
- Size 152KB
- Sample260602-fy2x4afv2n
- SHA256 546f466018868039dde28882d3e7c7b1a1ed63870ddd752d06605cad203fb5dd
- MD5 26cebf3c66c6b96e3edfbd0b13af0971
- SHA1 e9a13810a28b10f0981dfef9a8599f089c862da3
- SHA512 771a64a629b80c0410fee1243a1c159ef80caae0efdd55ed97bb10e950781a1603a4c7efa63cce7b8d119b036c5bab4c959fa5b704c69ca9cf0d90a4ad0a6d77
- SSDEEP 3072:kz1/jTExDOyXLjbmG3b5bTsLz0wvxX0gbY:UjIxWSbc1b
- TLSH T1B6E3F64927E49814E1FFA9730270A115C775F8021A6ADF1D1BC2B86D2B7D6E1CE06FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
648-13-0x0000000000420000-0x0000000000446000-memory.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
648-13-0x0000000000420000-0x0000000000446000-memory.exe
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
snakekeylogger
Credentials
-
Protocol
smtp
-
Host
mail.nirmanpower.org
-
Port
587
-
Username
-
Password
Nirman@7127
-
Email to
Targets
-
- Target 648-13-0x0000000000420000-0x0000000000446000-memory.dmp
- Size 152KB
- SHA256 546f466018868039dde28882d3e7c7b1a1ed63870ddd752d06605cad203fb5dd
- MD5 26cebf3c66c6b96e3edfbd0b13af0971
- SHA1 e9a13810a28b10f0981dfef9a8599f089c862da3
- SHA512 771a64a629b80c0410fee1243a1c159ef80caae0efdd55ed97bb10e950781a1603a4c7efa63cce7b8d119b036c5bab4c959fa5b704c69ca9cf0d90a4ad0a6d77
- SSDEEP 3072:kz1/jTExDOyXLjbmG3b5bTsLz0wvxX0gbY:UjIxWSbc1b
- TLSH T1B6E3F64927E49814E1FFA9730270A115C775F8021A6ADF1D1BC2B86D2B7D6E1CE06FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10