General
-
Target
2024-05-16_0fd235b24305a8c5ae7e9a0e441524f5_snatch
-
Size
8.9MB
-
MD5
0fd235b24305a8c5ae7e9a0e441524f5
-
SHA1
8afb157c5f58d2d336b58b1128e2a5cfbe21b3af
-
SHA256
fa6f3fcbbc965f5494ad4a4b33aafead0fe00305a359546b23fd86af575e4472
-
SHA512
b11d008a6d7bc7b71e4d2b1af5d0c5ddbb91606fd4d06c2c3cdb2c850b8ace5c21f4a32043291d3f8720b02fa8531950105bd9498d81a5cfc6996c341989786b
-
SSDEEP
98304:uHxMZDJ1TRpxYVX9u2IazANfLhZytTD5iqx:0xEvYjVzANjhwN
Score
10/10
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
-
Detects executables referencing many varying, potentially fake Windows User-Agents 1 IoCs
-
Glupteba family
-
Glupteba payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-16_0fd235b24305a8c5ae7e9a0e441524f5_snatch
9cbefe68f395e67356e2a5d8d1b285c0
Headers
Imports
Sections