Overview

overview

10

Static

static

10

8f50fbedc4...73.exe

windows7_x64

10

8f50fbedc4...73.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f50fbedc43a58fef6fe276a60eaf8a9539a8573.rl.zip

  • Size

    2.4MB

  • MD5

    a88255a14ce0a6863d1b256e08aa97e9

  • SHA1

    3ab9b8860b431ca290fde495ed9508fb84ba4145

  • SHA256

    5513b157beb22e67e20412c040964d626ca1f1938cb92a8440b3e8e016409941

  • SHA512

    fa0f4a15bf7a64c65fb9fa8a667335985a696f375700479e744982b0167d6a09b20d8b8767a680365c713e2bd859d616cbfb8c736be9b9e140ec4e31e2a813ca

  • SSDEEP

    49152:SuWl1a8kC04kysO98mR/H7gyIarghP5zbFV29KP+SCt8kXCCkdHuKOF:SrPvGKD3xiPlbv2w1aCnJYF

Score
10/10
upxsnatch

Malware Config

Signatures

  • Detecting the common Go functions and variables names used by Snatch ransomware 1 IoCs
  • Snatch family
    snatch
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 8f50fbedc43a58fef6fe276a60eaf8a9539a8573.rl.zip
    .zip

    Password: infected

  • 8f50fbedc43a58fef6fe276a60eaf8a9539a8573.rl
    .exe windows x64

    Password: infected


    Headers

    Sections