06d3d34504d907974ccfc1edac4d03f64885002d1b3bd06b2ab8bcb6e6b4295f

Analysis

max time kernel
51s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10/06/2024, 22:59

Target

2024-06-10_7872e7eae9c301a6afa04b081ec9dde7_snatch.exe
Size

13.6MB
MD5

7872e7eae9c301a6afa04b081ec9dde7
SHA1

a403e3c170fe5cb0048aa0118069a8de32ce2e39
SHA256

06d3d34504d907974ccfc1edac4d03f64885002d1b3bd06b2ab8bcb6e6b4295f
SHA512

a03782f6e614c7c200b512f445aa60b0dd558de062541cbc4f8d884e4a3c6fd22f93a2926be6d22571ea1c473714c0d1e76615828b5d3236549a0637ba1e554a
SSDEEP

196608:yptyyVw6Ev/IN0IeW5rMVIBXz7/TRuVcJ:MRVwxvAN/ppMuz7/nJ

Score

6^/10

Legitimate hosting services abused for malware hosting/C2 1 TTPs 1 IoCs

Web Service

flow	ioc
2	discord.com

C:\Users\Admin\AppData\Local\Temp\2024-06-10_7872e7eae9c301a6afa04b081ec9dde7_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-10_7872e7eae9c301a6afa04b081ec9dde7_snatch.exe"
1⤵
PID:1416

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact