ce4fda69ff042264003b4eb03bc158fc690aef8802aa1b1db8232a93a8bf0145 Add to Pulse Pulses 4 AV Detections 1 IDS Detections 18 YARA Detections 2 Analysis Overview Analysis Date 5 days ago File Score17MaliciousAntivirus Detections Win.Packed.Generickdz-9953541-0 IDS Detections SnakeKeylogger Exfil via FTP M1 404/Snake/Matiex Keylogger Style External IP Check MAL_Envrial_Jan18_1 baldr_be Alerts 26 Alerts network_cnc_https_socialmedia binary_yara procmem_yara static_pe_anomaly suricata_alert antiav_detectfile infostealer_mail antidebug_guardpages antisandbox_sleep dynamic_function_loading More IP’s Contacted 188.127.239.250 149.154.166.110 104.21.67.152 158.101.44.242 Domains Contacted checkip.dyndns.org reallyfreegeoip.org api.telegram.org LevelBlue Labs Pulses (1) , OTX User-Created Pulses (3) 21 Related Tags spear-phishing vip_keylogger browser-targeting process-hollowing filezilla More File Type PEXE - PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows PE Packer Microsoft Visual C++ vx.x DLL