General

  • Target

    200713-5x5vderhsx_pw_infected.zip

  • Size

    2.5MB

  • MD5

    36f0b2838afd49394ec12fbcbb6a29e2

  • SHA1

    9cfaa1d11e791556f747fef16efa1c04c6d84b81

  • SHA256

    81fb00c585e1c2379fc3241d104e62f6e106e8dfc1d4a73f8e878f2975740613

  • SHA512

    222eb801b5fc6884428ae5d8ca5e26c79f5f55004a3fc9299bbf370e85c2f113295c5f7d4ba9ce716fd0d9252f6ea11cd57f474f60115e675d57ea770698b8fb

  • SSDEEP

    49152:jKKSikpMP6yYGzs+3SztKZkdP+uxk11vqH964AYLA7+ufeWQ:TShmrz7CzoZiP+uW11CdpTLs+ufeWQ

Score
10/10

Malware Config

Signatures

  • Detecting the common Go functions and variables names used by Snatch ransomware 1 IoCs
  • Snatch family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 200713-5x5vderhsx_pw_infected.zip
    .zip

    Password: infected

  • 1d67abe1ec08e6215e08d6bb595ade3d1d33d0e886edf887b29f4d8e1d46e593
    .exe windows:6 windows x64

    Password: infected


    Headers

    Sections