General
-
Target
2024-05-14_fac6a38cc36900b0d011de0995abfaf4_snatch
-
Size
8.9MB
-
MD5
fac6a38cc36900b0d011de0995abfaf4
-
SHA1
a185e89484ff7cfef103116712f6c0269471d986
-
SHA256
518c1fb4fce70fc250af78f71ef92721ec8ec37ea0dae26c996da30a19fd3e15
-
SHA512
ac97d036b726624ef5639dba76ce88db8804b4bd002f396aa696705ab013399c05dd4ae33166783d504857a43448c470ab913000871385c52d2f70fab835771f
-
SSDEEP
98304:uHxMZDJ1TRpxYVX9u2IazANf8hZytTD5iqM:0xEvYjVzANUhwN
Score
10/10
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
-
Detects executables referencing many varying, potentially fake Windows User-Agents 1 IoCs
-
Glupteba family
-
Glupteba payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-14_fac6a38cc36900b0d011de0995abfaf4_snatch
9cbefe68f395e67356e2a5d8d1b285c0
Headers
Imports
Sections