Overview

overview

10

Static

static

10

6516e04cd2...42.exe

windows7-x64

7

6516e04cd2...42.exe

windows10-2004-x64

10

out.exe

windows7-x64

1

out.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    6516e04cd2987d6f53e1270d2c313b1aafa6fd7d13d73cf41fde8c19c05b3042
  • Size 2.4MB
  • Sample240101-pntcmsaggm
  • SHA256 6516e04cd2987d6f53e1270d2c313b1aafa6fd7d13d73cf41fde8c19c05b3042
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
snatchransomwareupx

Malware Config

Targets

    • Target
      6516e04cd2987d6f53e1270d2c313b1aafa6fd7d13d73cf41fde8c19c05b3042
    • Size 2.4MB
    • SHA256 6516e04cd2987d6f53e1270d2c313b1aafa6fd7d13d73cf41fde8c19c05b3042
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    upxsnatchransomware

    • Detecting the common Go functions and variables names used by Snatch ransomware

    • Snatch Ransomware

      Ransomware family generally distributed through RDP bruteforce attacks.

      ransomwaresnatch

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2
    • Target
      out.upx
    • Size 4.3MB
    • SHA256 147d4f0ad5bfc196e5604eaec8f56260a20eb45d386685b92650922979c383d4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks