General
-
Target
2024-05-24_fffb94154754042941eacd13bd7cab8e_snatch
-
Size
8.9MB
-
MD5
fffb94154754042941eacd13bd7cab8e
-
SHA1
588a7207620ace1466355c7f70d84868720f7bfc
-
SHA256
28c0309c4d1e9410469c40c06912ba0ae6c738e21ea39491f1f7f32192cef74e
-
SHA512
cf44e5f1931974c7456e1c3563f49b07912782b58facdb2bda542ee4cd2b59a2d05debf31de93c577e858c82722c8ac540e1fbc417e8b54967099b90a6f0aa03
-
SSDEEP
98304:0yP/Ui/TbjMC27sjjmcfqhZytTD5iqpg:nkup/mcShwNi
Score
10/10
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
-
Detects executables referencing many varying, potentially fake Windows User-Agents 1 IoCs
-
Glupteba family
-
Glupteba payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-24_fffb94154754042941eacd13bd7cab8e_snatch
9cbefe68f395e67356e2a5d8d1b285c0
Headers
Imports
Sections