General
-
Target
2024-05-25_f0e6ee40218ed8b57a833671609cd69d_snatch
-
Size
8.9MB
-
MD5
f0e6ee40218ed8b57a833671609cd69d
-
SHA1
7d1323efa00a57ddf269fd336d0b5a763ae574e5
-
SHA256
856288013bb0d752070345cb902db8ed04a66e62ce8d03153f60adbe23a65c62
-
SHA512
bd823b6d46111e59db182ddac65679816dcb9c2eefe06f2530612845f973fb3bdbc25ee72cc6b7e8ba3cb63737af4d478135cda8e0eac71093fa651c3fa27d72
-
SSDEEP
98304:0yP/Ui/TbjMC27sjjmcfphZytTD5iq9g:nkup/mcBhwN2
Score
10/10
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
-
Detects executables referencing many varying, potentially fake Windows User-Agents 1 IoCs
-
Glupteba family
-
Glupteba payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-25_f0e6ee40218ed8b57a833671609cd69d_snatch
9cbefe68f395e67356e2a5d8d1b285c0
Headers
Imports
Sections