b039a69726ee066daa582aa06c9c5cf12655378dde1b6f9ab0391bd8b0b13c25 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
08-06-2024 23:33

Sharing

Report Analysis Logs

General

Target

2024-06-08_cb23dfa2bebf13d48b591a7e1d7205cf_snatch.exe
Size

5.5MB
MD5

cb23dfa2bebf13d48b591a7e1d7205cf
SHA1

145c11b893829d7a3d9ca84eedbbdfd30b007b21
SHA256

b039a69726ee066daa582aa06c9c5cf12655378dde1b6f9ab0391bd8b0b13c25
SHA512

37ce2d2f984c66eb6fb1a8f1622c571feaee17c00c128abdac2dc05db09e95bec0695a358e996594eeb199c867e092f340218ab1e3dbf2e1e5258976502fd40f
SSDEEP

49152:Tka1rkzkg1YAdvYccvLQu2KTFUF6SUHD4tKTyJ+ezmuiSCfAcO9fXqFn1c1H:T1AzkgR9UcKTS2HDGKOJVLN91H

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2024-06-08_cb23dfa2bebf13d48b591a7e1d7205cf_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-08_cb23dfa2bebf13d48b591a7e1d7205cf_snatch.exe"
1⤵
PID:2884

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads