General

  • Target

    2024-05-10_0251f66d59f1ec0ab7a4768e1203e2cc_snatch

  • Size

    9.9MB

  • Sample

    240510-t8talaae43

  • MD5

    0251f66d59f1ec0ab7a4768e1203e2cc

  • SHA1

    0113541789068deb2ee0cce2fa5eafb1430487f6

  • SHA256

    eda8f90c8bb1636f8fbad4387b2f1a6a730c764e8374053e2d65b690eb111610

  • SHA512

    497ff5367d68ba3c78edb1dd1b361db413142e6831d8b73b5f3eaf72f1ec347f894681e9e127ea294dab23343f38dfab4c99a0c8f3cb50d0a4224dcc006527bf

  • SSDEEP

    98304:s/uYb/g1tUWXQT/u/ch3EE9uDTo+ARZVFf7+Aa4:se1shtEo+ARZVFf7La4

Malware Config

Targets

    • Target

      2024-05-10_0251f66d59f1ec0ab7a4768e1203e2cc_snatch

    • Size

      9.9MB

    • MD5

      0251f66d59f1ec0ab7a4768e1203e2cc

    • SHA1

      0113541789068deb2ee0cce2fa5eafb1430487f6

    • SHA256

      eda8f90c8bb1636f8fbad4387b2f1a6a730c764e8374053e2d65b690eb111610

    • SHA512

      497ff5367d68ba3c78edb1dd1b361db413142e6831d8b73b5f3eaf72f1ec347f894681e9e127ea294dab23343f38dfab4c99a0c8f3cb50d0a4224dcc006527bf

    • SSDEEP

      98304:s/uYb/g1tUWXQT/u/ch3EE9uDTo+ARZVFf7+Aa4:se1shtEo+ARZVFf7La4

    • Downloads MZ/PE file

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks