adaa0c0bbdd85a3dc51cfb26a9eb7f735ba8725abf80a8fcc9053a8bf33cf348

Analysis

max time kernel
139s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
01/05/2024, 00:25

Target

2024-05-01_0be560d22d200413c45b0fe71d4b0905_snatch.exe
Size

8.3MB
MD5

0be560d22d200413c45b0fe71d4b0905
SHA1

637268842abfbe7a77df19ef84cb0593bfe61130
SHA256

adaa0c0bbdd85a3dc51cfb26a9eb7f735ba8725abf80a8fcc9053a8bf33cf348
SHA512

5515a792700b4d794bbba7714aebdc5f86b92445fd8d0445f40f65e1c59904eeae56af98e512812f01588eb8fd65563f31fd8b86bfaf61a7f0027b5a751600aa
SSDEEP

98304:TBP4OCobraTdX0p5Ea7KyqUAXPKGeuEsV0oMolCPW:TnC2raTL6TiPLex40Lv

Score

6^/10

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

flow	ioc
3	raw.githubusercontent.com
4	raw.githubusercontent.com

C:\Users\Admin\AppData\Local\Temp\2024-05-01_0be560d22d200413c45b0fe71d4b0905_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-01_0be560d22d200413c45b0fe71d4b0905_snatch.exe"
1⤵
PID:2960

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact