General

  • Target

    2024-05-22_22f1d2455936d065587077e4e620d6d1_snatch

  • Size

    9.3MB

  • MD5

    22f1d2455936d065587077e4e620d6d1

  • SHA1

    0d1a2eb7725ec10424ce8b1d1d1fc0cd180acb48

  • SHA256

    5c77809607eeff568d158df7a2a6350bf45ec3d861d418efa52c1016170f2af6

  • SHA512

    0b2b2e509894b0227d44002bd50a64d03b604d5c8c051d137114be7854476792152d9eb9d8564f4f94862ac3da4fc9a4307e90fa68bd4c8191ed82ae8483670c

  • SSDEEP

    196608:9DvsdLZn7zkbF4Gcc4V65oa3Fg2RXg7FQp:ZEdLZ7zkbFlcTw5p3qd

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables (downlaoders) containing URLs to raw contents of a paste 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_22f1d2455936d065587077e4e620d6d1_snatch
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections