snatch | 36a4311ef332b0b5db62f8fcabf004fdcfbbde62f791839a8be0314604d814c4[.]sample

General

Target

36a4311ef332b0b5db62f8fcabf004fdcfbbde62f791839a8be0314604d814c4.sample
Size

4.2MB
MD5

32de66a467db22cf0f5b65d1a9f4e19c
SHA1

cdb5c200cba7da3f6e80e868ef7df380ac1259c2
SHA256

36a4311ef332b0b5db62f8fcabf004fdcfbbde62f791839a8be0314604d814c4
SHA512

af200cc334c05e5fe0df1d4c76b5ce469d034c0d62288d207b6bb6562579e07dc4510e4bfc4b726cf1a9f82ae8cb69c4630e981f23d05fb85e3be842a34244f1

Score

10^/10

upx snatch

Detecting the common Go functions and variables names used by Snatch ransomware 1 IoCs

Processes:

resource	yara_rule
sample	family_snatch

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
sample	upx

36a4311ef332b0b5db62f8fcabf004fdcfbbde62f791839a8be0314604d814c4.sample
.exe windows x86