Overview

overview

10

Static

static

3

pacman.exe

windows7-x64

3

pacman.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pacman.exe

  • Size

    17.4MB

  • Sample

    250219-a86fdatjdj

  • MD5

    6b7c47f469f6d6da5f29cd4abf021af3

  • SHA1

    2b802b1081242beae884ed280c6f243576bce589

  • SHA256

    e0320dd07664a62a6b8d85c68df98aa3a674428a8c85e6f75410a1dbfe66ca2a

  • SHA512

    fdb8f1b7748b3d0eb07e11c1811134f8c865a335147f079b2bc73bd01411fb44f9940af44c877d4fe72a333ac9801c542e7ab3459cf72bf50601046615ae2bcf

  • SSDEEP

    393216:qzzj4URW5zzG+1Zvnd51xKvjLSAILzBCEIvhUq:gnkfPTKv6zBCtWq

Score
10/10
snakebotdiscoverysnakebot

Malware Config

Targets

    • Target

      pacman.exe

    • Size

      17.4MB

    • MD5

      6b7c47f469f6d6da5f29cd4abf021af3

    • SHA1

      2b802b1081242beae884ed280c6f243576bce589

    • SHA256

      e0320dd07664a62a6b8d85c68df98aa3a674428a8c85e6f75410a1dbfe66ca2a

    • SHA512

      fdb8f1b7748b3d0eb07e11c1811134f8c865a335147f079b2bc73bd01411fb44f9940af44c877d4fe72a333ac9801c542e7ab3459cf72bf50601046615ae2bcf

    • SSDEEP

      393216:qzzj4URW5zzG+1Zvnd51xKvjLSAILzBCEIvhUq:gnkfPTKv6zBCtWq

    Score
    10/10
    discoverysnakebotsnakebot

    • SnakeBOT

      SnakeBOT is a heavily obfuscated .NET downloader.

      snakebot

    • Snakebot family

      snakebot

    • Contains SnakeBOT related strings

      snakebot

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks