General

  • Target

    d0003c88c3a7786f3642ec903ce98f4027badaba69b7c3bb2e90a6e4e9587f54

  • Size

    2.3MB

  • MD5

    2fa3c5b2e6a0c465045fe8dd7f55dd9a

  • SHA1

    1e6ea91491804da44db10be25bd1ea36baa0b362

  • SHA256

    d0003c88c3a7786f3642ec903ce98f4027badaba69b7c3bb2e90a6e4e9587f54

  • SHA512

    12f2aaa7cf2055d0a15470d926690dc558d5b6a1eb7dd9f1e450ddbdd1c5389670aea7c39e800f86840f0a558b86ba023beb82d6ba66557a1882e6491b1865e1

  • SSDEEP

    49152:zwKNchAjMta5q1SRNyYvgkCzS8QpWRjoYS8KXrTBt6z8zQBmL2eC8AE:MKtjMoq0IG8QpWRjZaPEFnem

Score
10/10

Malware Config

Signatures

  • Detecting the common Go functions and variables names used by Snatch ransomware 1 IoCs
  • Snatch family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • d0003c88c3a7786f3642ec903ce98f4027badaba69b7c3bb2e90a6e4e9587f54
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections