General
-
Target
2024-05-10_0251f66d59f1ec0ab7a4768e1203e2cc_snatch
-
Size
9.9MB
-
Sample
240510-t8talaae43
-
MD5
0251f66d59f1ec0ab7a4768e1203e2cc
-
SHA1
0113541789068deb2ee0cce2fa5eafb1430487f6
-
SHA256
eda8f90c8bb1636f8fbad4387b2f1a6a730c764e8374053e2d65b690eb111610
-
SHA512
497ff5367d68ba3c78edb1dd1b361db413142e6831d8b73b5f3eaf72f1ec347f894681e9e127ea294dab23343f38dfab4c99a0c8f3cb50d0a4224dcc006527bf
-
SSDEEP
98304:s/uYb/g1tUWXQT/u/ch3EE9uDTo+ARZVFf7+Aa4:se1shtEo+ARZVFf7La4
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-10_0251f66d59f1ec0ab7a4768e1203e2cc_snatch.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-10_0251f66d59f1ec0ab7a4768e1203e2cc_snatch.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-10_0251f66d59f1ec0ab7a4768e1203e2cc_snatch
-
Size
9.9MB
-
MD5
0251f66d59f1ec0ab7a4768e1203e2cc
-
SHA1
0113541789068deb2ee0cce2fa5eafb1430487f6
-
SHA256
eda8f90c8bb1636f8fbad4387b2f1a6a730c764e8374053e2d65b690eb111610
-
SHA512
497ff5367d68ba3c78edb1dd1b361db413142e6831d8b73b5f3eaf72f1ec347f894681e9e127ea294dab23343f38dfab4c99a0c8f3cb50d0a4224dcc006527bf
-
SSDEEP
98304:s/uYb/g1tUWXQT/u/ch3EE9uDTo+ARZVFf7+Aa4:se1shtEo+ARZVFf7La4
Score8/10-
Downloads MZ/PE file
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-