General
-
Target
2024-05-20_a170d04e70b76f05d376cfdf8f39e3f7_snatch
-
Size
2.8MB
-
MD5
a170d04e70b76f05d376cfdf8f39e3f7
-
SHA1
065572282fd5d5bde88df5adf0124d52247a6f83
-
SHA256
9a1d44975b9b2bb8f40cdf2edf718910f252172fa5f8b2d8fff5865ce5f7c10b
-
SHA512
4f2d6b156982ca41264e4e9c6ed637d89ff9bbf2802a69f664ea052e5711a67d80dcf90d3bfa1244ffb28e4a5f95ad7a3c721c4c5729b930b7865a3ee2fdebce
-
SSDEEP
49152:XIdItgxN70GZj7n3LShC8NS9r23oGJ/zwrRD1SFR:YdXO5NS9r23iRD1e
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-20_a170d04e70b76f05d376cfdf8f39e3f7_snatch
4f2f006e2ecf7172ad368f8289dc96c1
Headers
Imports
Sections