General
-
Target
2024-05-25_a5eedbc6ae581b1a87bf8b0f8b3e85be_snatch
-
Size
8.9MB
-
MD5
a5eedbc6ae581b1a87bf8b0f8b3e85be
-
SHA1
1438cc4462b96f4e5405bb0b5501702237fa16be
-
SHA256
9eafcb585688e33f91e3c1adcb63fcc0e24cfbf1da2fbbb89044cd4ab765d82e
-
SHA512
be74ecd515d33160edeb3fbec9470c756612c9df9c98234de5f298f54a0218d284496d79f4c08c3ce51ba3f89c3aa7d0b29d79a29f30cd341ead5964610bd519
-
SSDEEP
98304:0yP/Ui/TbjMC27sjjmcfShZytTD5iqTg:nkup/mcqhwNk
Score
10/10
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
-
Detects executables referencing many varying, potentially fake Windows User-Agents 1 IoCs
-
Glupteba family
-
Glupteba payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-25_a5eedbc6ae581b1a87bf8b0f8b3e85be_snatch
9cbefe68f395e67356e2a5d8d1b285c0
Headers
Imports
Sections