General
-
Target
2024-05-15_ead399c56ce98a737c78b54a6a7a78aa_snatch
-
Size
8.9MB
-
MD5
ead399c56ce98a737c78b54a6a7a78aa
-
SHA1
6903395cdc546b78b8fad6c4c79041ef874d1ad7
-
SHA256
cb4b3ed6846300c5b997fa0abd86f3d55caabbaaf23f207c5e8534cfcaae071d
-
SHA512
72c606f5ffb582957d8f1335b954d112684d57aa77abd0143821cc0a4061be6a09fa5de0c3d98f19ee0da58e71197fb3b0047f108269bd5931b682c45e18bec2
-
SSDEEP
98304:uHxMZDJ1TRpxYVX9u2IazANfAhZytTD5iqb:0xEvYjVzANYhwN
Score
10/10
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
-
Detects executables referencing many varying, potentially fake Windows User-Agents 1 IoCs
-
Glupteba family
-
Glupteba payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-15_ead399c56ce98a737c78b54a6a7a78aa_snatch
9cbefe68f395e67356e2a5d8d1b285c0
Headers
Imports
Sections