General

  • Target

    2024-05-30_fa941f13d2e13d33776a1702fec716f2_snatch

  • Size

    7.9MB

  • MD5

    fa941f13d2e13d33776a1702fec716f2

  • SHA1

    1a41b173b696ada756e4928a8cafbac0cfc9a275

  • SHA256

    0ae53e18549544434b2ea2f62fc988a74b5a29269a080ab618e2390c288dfafc

  • SHA512

    edf95f4201c00a77aee7957d23ee510b38707834d59233ac2035a83fb9fb6b4bdc9cf4b2fff0d3d1b9a985cbe657ce1c9ee496f6009a18bc71dda162c66ecf38

  • SSDEEP

    98304:AFnVIuelK5XPFZ+GEpm/ZZqvTUOKCg6kge9jSeoc3wdbAhJYAV7zirYM/:6TelK5X9qpFg6kF9j/X3JcAtm0y

Score
10/10

Malware Config

Extracted

Family

striker

C2

https://discord.com/api/webhooks/1235419049446473761/aztW31g1ly6Y90Jt-r6gDU-a1PtG9d5iEc6VUIk3f_8y-aZ4ZShkg8qBiGGZfQMfDcCY

Signatures

  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Striker family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-30_fa941f13d2e13d33776a1702fec716f2_snatch
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections