Analysis
-
max time kernel
136s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
30-04-2024 00:49
General
-
Target
2024-04-30_5f3cb42e9de0182e56ec3db02c64c4e0_snatch.exe
-
Size
3.7MB
-
MD5
5f3cb42e9de0182e56ec3db02c64c4e0
-
SHA1
4e90c7e0f2464633d98e14b7c633fe6a2fe6503e
-
SHA256
8339e7b50ab6ebd58d0d073806fc6fddb2424867458218fdbc4c1a3376d3c5cd
-
SHA512
fb1c99c7b4d5b77e4fe27062be32f1b2b326fda6c3dbf4cd2d953c2580e389a4c77805c6a772edcdee2b1c93f54b8e1d873ddeb54261ecd0a8abfcfefafad399
-
SSDEEP
49152:qp1MT3tSJrb/TivO90d7HjmAFd4A64nsfJ+VielkNCd3OE9CJ5E4eg/IDRt0cwv/:F3ig+dEn4/
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-30_5f3cb42e9de0182e56ec3db02c64c4e0_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-30_5f3cb42e9de0182e56ec3db02c64c4e0_snatch.exe"1⤵
- Suspicious use of AdjustPrivilegeToken