General

  • Target

    2024-10-15_6d80b3e76099d049c5008a23d38936ab_snatch

  • Size

    2.6MB

  • MD5

    6d80b3e76099d049c5008a23d38936ab

  • SHA1

    3b47d5fc476349dfd33594d1647610925d863151

  • SHA256

    bbf0e161b87265e5f10ca226f1188eb6ce157acb7c2aac6ad56367058e86f5fb

  • SHA512

    3305b4818b4a1ec6e8b8d1c479f4da68d35af98aae043b43eb59f45d4a1bc301b337cd542feb6d12c9ecd7365cde70885233469092bf5afc87dc3f9195cbed95

  • SSDEEP

    24576:t4ybxkJlcXgszkiwIm9seW6sCtTlXc/ut5Mdrp7hSgsuLu5RPVeVbV2qK7zAq/Gm:r6cQsoBISsB/LujVDAB/X+

Score
10/10

Malware Config

Signatures

  • Zebrocy Go Variant 1 IoCs
  • Zebrocy family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-15_6d80b3e76099d049c5008a23d38936ab_snatch
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections