General
-
Target
cd4b4566460611a2dfa75f755270d5b2f56edff3d50a9ef6be8b3c92728c46a3
-
Size
2.2MB
-
MD5
664351f9e645e79cdf17d8bb859ef8e5
-
SHA1
6f45ee1f3246318d94368de97648245718de795d
-
SHA256
cd4b4566460611a2dfa75f755270d5b2f56edff3d50a9ef6be8b3c92728c46a3
-
SHA512
ccd49da2df1fdc3e789000709ce871abe6c90c98842040d818c343d04a165eade662433483e1ea1891c43d099616a29dced57d483cdd35d7642ed30ae66995a1
-
SSDEEP
49152:kZxdq3f7AohAROoPkMrZVOGeBPEwSX+gyJ7I1Pud1w7pVJ9EluMH3opjhKa70I3Q:kOPhAooPkMnoI+gyJuJ7DJSluMHOjhji
Score
10/10
Malware Config
Signatures
-
Detecting the common Go functions and variables names used by Snatch ransomware 1 IoCs
-
Snatch family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
cd4b4566460611a2dfa75f755270d5b2f56edff3d50a9ef6be8b3c92728c46a3
Headers
Sections
-
out.upx
Headers
Sections