General
-
Target
2024-05-24_8b69743677fe19874ad2ed793dac5e6c_snatch
-
Size
8.8MB
-
MD5
8b69743677fe19874ad2ed793dac5e6c
-
SHA1
c1e59708803054a53e56abc29d3bc4cd0cad373f
-
SHA256
4b297b941e847474d5aea8e0fccff2a5e115fe2250fca6148880917d54da723a
-
SHA512
3dcd97076ec64f3101f2b7114f3b47a0e359497e9496821052b504d46cb3fcab43b1b336a160c906534dd0888b8772dc49ec9ff1de1d9bc28408c431d9bbc524
-
SSDEEP
98304:QXT6kIDM0Fk4z3ukaXyCK3hZytTD5iq7:mRIDTaCCWhwNT
Score
10/10
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
-
Detects executables referencing many varying, potentially fake Windows User-Agents 1 IoCs
-
Glupteba family
-
Glupteba payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-24_8b69743677fe19874ad2ed793dac5e6c_snatch
9cbefe68f395e67356e2a5d8d1b285c0
Headers
Imports
Sections