General

  • Target

    36a4311ef332b0b5db62f8fcabf004fdcfbbde62f791839a8be0314604d814c4

  • Size

    4.2MB

  • MD5

    32de66a467db22cf0f5b65d1a9f4e19c

  • SHA1

    cdb5c200cba7da3f6e80e868ef7df380ac1259c2

  • SHA256

    36a4311ef332b0b5db62f8fcabf004fdcfbbde62f791839a8be0314604d814c4

  • SHA512

    af200cc334c05e5fe0df1d4c76b5ce469d034c0d62288d207b6bb6562579e07dc4510e4bfc4b726cf1a9f82ae8cb69c4630e981f23d05fb85e3be842a34244f1

  • SSDEEP

    49152:fgZNPqLGVfMmq1d1MRGM8Fvg9fR5HMXF9W9HrAbluBUMNk+cqG2UtBpStPvC/9f+:fgXsMfql+9G9+B+tBpEPvCF

Score
10/10

Malware Config

Signatures

  • Detecting the common Go functions and variables names used by Snatch ransomware 1 IoCs
  • Snatch family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 36a4311ef332b0b5db62f8fcabf004fdcfbbde62f791839a8be0314604d814c4
    .exe windows x86


    Headers

    Sections