General
- Target 2026-06-01_552582c6e2dcffde06cc0e1814ee83bd_snatch
- Size 2.7MB
- Sample260601-vqsrsaa19v
- SHA256 de35595371d5ea945da9d23d1a85276a52bc96b7f8218e0ec406fef4c53926da
- MD5 552582c6e2dcffde06cc0e1814ee83bd
- SHA1 90e16f203c224e294ddc69866666983dc40bbf6d
- SHA512 452089b40d2582d7b64ea90ce7362fedb5bf8b8f725680b4e2378792d3e0ccbab14623d752b8343b501b7a15baaaf887df8ee3e298e300b46bc01b1ac6bdbbc9
- SSDEEP 49152:jmWQDUU8EbtCPDixe4pSyyT1vrBV29uuKRMXq7Y:jQxPwb142r69pvaY
- TLSH T1DFD56A8B6C62E1E1C819B2B7649381717B28FC247B72A7F73A9861351F312C449F6F94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_552582c6e2dcffde06cc0e1814ee83bd_snatch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_552582c6e2dcffde06cc0e1814ee83bd_snatch.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_552582c6e2dcffde06cc0e1814ee83bd_snatch
- Size 2.7MB
- SHA256 de35595371d5ea945da9d23d1a85276a52bc96b7f8218e0ec406fef4c53926da
- MD5 552582c6e2dcffde06cc0e1814ee83bd
- SHA1 90e16f203c224e294ddc69866666983dc40bbf6d
- SHA512 452089b40d2582d7b64ea90ce7362fedb5bf8b8f725680b4e2378792d3e0ccbab14623d752b8343b501b7a15baaaf887df8ee3e298e300b46bc01b1ac6bdbbc9
- SSDEEP 49152:jmWQDUU8EbtCPDixe4pSyyT1vrBV29uuKRMXq7Y:jQxPwb142r69pvaY
- TLSH T1DFD56A8B6C62E1E1C819B2B7649381717B28FC247B72A7F73A9861351F312C449F6F94
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion
-
Suspicious use of NtSetInformationThreadHideFromDebugger