Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
12/06/2024, 17:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-06-12_5742153cfe38b80958f86fc3f42e8f57_snatch.exe
Resource
win7-20240508-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-12_5742153cfe38b80958f86fc3f42e8f57_snatch.exe
Resource
win10v2004-20240611-en
2 signatures
150 seconds
General
- Target 2024-06-12_5742153cfe38b80958f86fc3f42e8f57_snatch.exe
- Size 4.1MB
- Sample240612-vh45vascrf
- SHA256 c8190628ff508b7dfb1750ed11538af7c19aae5ececb71729a746c78fcd9724c
- MD5 5742153cfe38b80958f86fc3f42e8f57
- SHA1 ee3c9c7f95917932e6c5f13a78da8442dec16742
- SHA512 8f54a29a869fcf59b251eb6507cbaf8401b4b974f9f1dffc44b33dc1c0e53c6f733b018b6c70172a10052454a5c76aa2335111cbbd596a04634e2b687cfa77ea
- SSDEEP 49152:9QkJWZpdQ0uZoQmpvDaIij35EGWGHZVMt3zROcslVg:lCZDaIOEZDOcQ6
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 5092 2024-06-12_5742153cfe38b80958f86fc3f42e8f57_snatch.exe 5092 2024-06-12_5742153cfe38b80958f86fc3f42e8f57_snatch.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 5092 2024-06-12_5742153cfe38b80958f86fc3f42e8f57_snatch.exe 5092 2024-06-12_5742153cfe38b80958f86fc3f42e8f57_snatch.exe