General
-
Target
2024-05-15_240af5907207c1084dcefcc684cab693_snatch
-
Size
8.9MB
-
MD5
240af5907207c1084dcefcc684cab693
-
SHA1
e7fff6607386f644813e9413f076caf24ba9a3ae
-
SHA256
373797b04063189cd22ebf2315b8ee8b0a0f37c28ae11b3b32213d1286b0061f
-
SHA512
501ff11559b3c5617a1b0d1a3a5c3331591f07272c9b5e9a5d7b160253a3eb99c19aca37fd4da67bcf6f2e9191a3c4b8b5d596f2c1743e900de97b73d181902a
-
SSDEEP
98304:uHxMZDJ1TRpxYVX9u2IazANfBhZytTD5iq+:0xEvYjVzANJhwN
Score
10/10
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
-
Detects executables referencing many varying, potentially fake Windows User-Agents 1 IoCs
-
Glupteba family
-
Glupteba payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-15_240af5907207c1084dcefcc684cab693_snatch
9cbefe68f395e67356e2a5d8d1b285c0
Headers
Imports
Sections