General

  • Target

    2024-06-06_9a5674a87f2b7a1416a2c65c7964a39b_snatch

  • Size

    13.8MB

  • Sample

    240606-n3tfhseg54

  • MD5

    9a5674a87f2b7a1416a2c65c7964a39b

  • SHA1

    7c1fe11d7013c7c113ad6b08507ad87be9060f81

  • SHA256

    5cc6619b8553a55cb9882aa06f7e917039c6c9ed45c5d0c89acb2443fa066f60

  • SHA512

    8edafb611a1f35690422a487c48c0cff433ae98ded8a54ad3e8e767a93cab7733b0eef15786a98f36a17476fe863c3c56ef2429087c4a3a096db9c7c95bcc0fe

  • SSDEEP

    98304:jha8+qbVRQH2tllJlOIxPjWnO4yQ8Pu2VVKggYZ63X6yEZDh8TG6Z2Z:9rPPjF1Q8PuGsxccX6ylTYZ

Malware Config

Targets

    • Target

      2024-06-06_9a5674a87f2b7a1416a2c65c7964a39b_snatch

    • Size

      13.8MB

    • MD5

      9a5674a87f2b7a1416a2c65c7964a39b

    • SHA1

      7c1fe11d7013c7c113ad6b08507ad87be9060f81

    • SHA256

      5cc6619b8553a55cb9882aa06f7e917039c6c9ed45c5d0c89acb2443fa066f60

    • SHA512

      8edafb611a1f35690422a487c48c0cff433ae98ded8a54ad3e8e767a93cab7733b0eef15786a98f36a17476fe863c3c56ef2429087c4a3a096db9c7c95bcc0fe

    • SSDEEP

      98304:jha8+qbVRQH2tllJlOIxPjWnO4yQ8Pu2VVKggYZ63X6yEZDh8TG6Z2Z:9rPPjF1Q8PuGsxccX6ylTYZ

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks