General

  • Target

    2024-05-08_79ba0fe85db7ece98a29799013071b33_snatch

  • Size

    9.2MB

  • MD5

    79ba0fe85db7ece98a29799013071b33

  • SHA1

    1772e82987b26fa04edf66b97fba20a43e5d753d

  • SHA256

    715d1abed55828f21a7834abec060e4399c4266cb139e578639d99295f7d40cf

  • SHA512

    451f2085a47ca9d6a43f4ce1822372b542981da9de4b177dcedc6f94faf0bae91d5d8c57b12e75d3c42e846121cfe8eba5b4cd34e71b439d033a822d46486509

  • SSDEEP

    98304:e40DEd6Zq1mwZt5R/6E6YYfsYh5yodsE50BPquQTWZR0:e1fZq1mi501fF2fmWZR0

Score
10/10

Malware Config

Signatures

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-08_79ba0fe85db7ece98a29799013071b33_snatch
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections