General

  • Target

    2024-05-29_222616ddcfbd6bc20a5a960aa5910a4d_snatch

  • Size

    9.6MB

  • MD5

    222616ddcfbd6bc20a5a960aa5910a4d

  • SHA1

    cf6b4336dd5630df42cf13c0faacc5e7f78e45c2

  • SHA256

    b73a4eef281160c27b14f8a2930b510a22e061773705a7baa40bb6b7c0135d68

  • SHA512

    98b48b6868d605f5b6fe95597c1b507fdc78371806ab3881c84ac14191a1225fbaec2cfa652deac7e75a32fcff063e3bb619d4c207d10a60e327a17cc224b1dd

  • SSDEEP

    196608:BuoiEoYyoHvKyy6tzc5vVdqGkGG5hg87tcUqFY+:koiEMoHvPy6tzc5vVvGrX9qFb

Score
10/10

Malware Config

Signatures

  • Detects executables (downlaoders) containing URLs to raw contents of a paste 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Dynam1c family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_222616ddcfbd6bc20a5a960aa5910a4d_snatch
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections