Analysis
-
max time kernel
92s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
01-07-2024 04:42
General
-
Target
2024-07-01_9cb8ae9d9c58ab2cd292db6c55df4c0f_snatch.exe
-
Size
15.7MB
-
MD5
9cb8ae9d9c58ab2cd292db6c55df4c0f
-
SHA1
4040ad9eb2bacde99fe67a39ce30702e1a9cdcfe
-
SHA256
d570c1d102f61bc394b3dd8b0338dd37d6cb1ebf287e972078ddb3c081ef2469
-
SHA512
5a7caa4d19ae4603e58b887a773e2f6f7ddaf3bcd76ece895f7551ae3966f0be9cb44f2eb17abbcfd45c7f346ec4ad60d821d4ab47bb519c321405ecbc4f75b4
-
SSDEEP
196608:DT7lUD27pyc8LTy7fNhEDPPS/Fz4iWErGxZbL36BTJ:fxx7sc8LO7nV43DKRJ
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-01_9cb8ae9d9c58ab2cd292db6c55df4c0f_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-01_9cb8ae9d9c58ab2cd292db6c55df4c0f_snatch.exe"1⤵
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\Session Storage_8.temp\CURRENTFilesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Local\Temp\Session Storage_8.temp\MANIFEST-000001Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b