General
-
Target
2024-05-01_dfffda508709ff7469d300702dfbc4d6_snatch
-
Size
26.3MB
-
MD5
dfffda508709ff7469d300702dfbc4d6
-
SHA1
cff1f985592bed2136142a05d7336104a459bf6a
-
SHA256
bf897254e85c4888b9bc1429ba5bba7d498cb523301c25867010abb59f4b7b10
-
SHA512
8818bb38afb8ba2c2ced08d6ac7d3ea98b98fa1546a533484ea39001c1d5b5d76ab67cf42b170798bcdd1f8893597358ad356cfcca96de7f155431f0648fe697
-
SSDEEP
196608:u5+cOg9IRoSnnY2zJ4VPC76++4bO6reAIaLU9dIonx8gD2an+lN:utqeP4bOZaO3xzDS
Score
10/10
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables referencing many varying, potentially fake Windows User-Agents 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-01_dfffda508709ff7469d300702dfbc4d6_snatch
4f2f006e2ecf7172ad368f8289dc96c1
Headers
Imports
Sections