General

  • Target

    2024-10-17_60a695cdb8dd7bab484cf4676ef0296d_snatch

  • Size

    2.7MB

  • MD5

    60a695cdb8dd7bab484cf4676ef0296d

  • SHA1

    63654366314bd7150e45b5ca43cf5c2d9d9d3a9c

  • SHA256

    60d1562ddf254bf40fcc2503fc2f0a78867907028f7662937221a481c3b8f33b

  • SHA512

    f6bb6505b2a1496f893f131d8d911d44ef49cfb6956196b9f954ac6d1f04729b2bdb1d8dc0e80dd3756d81e95528817d147ac7230e5e2de688347a284a90bd1e

  • SSDEEP

    24576:X4ybxkJlcXgszkiwIm9seW6sCtTlXc/ut5Mdrp7hSgsuLu5RPVeVbV2qK7zAq/Hm:F6cQsoBISsB/LujVDA0/X+

Score
10/10

Malware Config

Signatures

  • Zebrocy Go Variant 1 IoCs
  • Zebrocy family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-17_60a695cdb8dd7bab484cf4676ef0296d_snatch
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections