General
-
Target
2024-06-06_9a5674a87f2b7a1416a2c65c7964a39b_snatch
-
Size
13.8MB
-
Sample
240606-n3tfhseg54
-
MD5
9a5674a87f2b7a1416a2c65c7964a39b
-
SHA1
7c1fe11d7013c7c113ad6b08507ad87be9060f81
-
SHA256
5cc6619b8553a55cb9882aa06f7e917039c6c9ed45c5d0c89acb2443fa066f60
-
SHA512
8edafb611a1f35690422a487c48c0cff433ae98ded8a54ad3e8e767a93cab7733b0eef15786a98f36a17476fe863c3c56ef2429087c4a3a096db9c7c95bcc0fe
-
SSDEEP
98304:jha8+qbVRQH2tllJlOIxPjWnO4yQ8Pu2VVKggYZ63X6yEZDh8TG6Z2Z:9rPPjF1Q8PuGsxccX6ylTYZ
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-06_9a5674a87f2b7a1416a2c65c7964a39b_snatch.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-06-06_9a5674a87f2b7a1416a2c65c7964a39b_snatch.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-06_9a5674a87f2b7a1416a2c65c7964a39b_snatch
-
Size
13.8MB
-
MD5
9a5674a87f2b7a1416a2c65c7964a39b
-
SHA1
7c1fe11d7013c7c113ad6b08507ad87be9060f81
-
SHA256
5cc6619b8553a55cb9882aa06f7e917039c6c9ed45c5d0c89acb2443fa066f60
-
SHA512
8edafb611a1f35690422a487c48c0cff433ae98ded8a54ad3e8e767a93cab7733b0eef15786a98f36a17476fe863c3c56ef2429087c4a3a096db9c7c95bcc0fe
-
SSDEEP
98304:jha8+qbVRQH2tllJlOIxPjWnO4yQ8Pu2VVKggYZ63X6yEZDh8TG6Z2Z:9rPPjF1Q8PuGsxccX6ylTYZ
Score8/10-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-