General
-
Target
2024-04-27_2d20767788bf668c4445e9085582355b_snatch
-
Size
17.8MB
-
Sample
240427-2l4f2sae3y
-
MD5
2d20767788bf668c4445e9085582355b
-
SHA1
777ab09dfa7d01a567419434779e5dc707ad39ef
-
SHA256
4e4b97852123afaa08c680e93dbc1a6d4c0154a52b9e9a89fd41435825cf799b
-
SHA512
794be6f9a62e52cae2cd78c7a96d7394b85ad1da7fec67747dd09bbd54542504d1d15cb121002663690616e72ec4a09303cc4b08ab2f32a12c89b1ab45e9888f
-
SSDEEP
98304:OTykheA8p66N7vtyKVgo6gkcD7FrPOUsN4sfnFX1bVX1MfXEIbBtDByujlKs:l0Ahdzgo6gkcD7FrPbIfnT5ZIrDj
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_2d20767788bf668c4445e9085582355b_snatch.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-27_2d20767788bf668c4445e9085582355b_snatch.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-27_2d20767788bf668c4445e9085582355b_snatch
-
Size
17.8MB
-
MD5
2d20767788bf668c4445e9085582355b
-
SHA1
777ab09dfa7d01a567419434779e5dc707ad39ef
-
SHA256
4e4b97852123afaa08c680e93dbc1a6d4c0154a52b9e9a89fd41435825cf799b
-
SHA512
794be6f9a62e52cae2cd78c7a96d7394b85ad1da7fec67747dd09bbd54542504d1d15cb121002663690616e72ec4a09303cc4b08ab2f32a12c89b1ab45e9888f
-
SSDEEP
98304:OTykheA8p66N7vtyKVgo6gkcD7FrPOUsN4sfnFX1bVX1MfXEIbBtDByujlKs:l0Ahdzgo6gkcD7FrPbIfnT5ZIrDj
Score6/10-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-