Managed XDR

2025-04-06_33e8d03ed41...-stealer_sliver_snatch — malware analysis report

File info

Filename: 2025-04-06_33e8d03ed41ebb8c810bab8fa3a735f4_cobalt-strike_frostygoop_ghostlocker_luca-stealer_sliver_snatch
File type: PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
File size: 4.2 MB
First seen: 2025-04-06 09:22
Last seen: 2025-04-06 09:22

Environment

win7/x64 en

Hashes

SHA1: 055b52883b29afdb0c5cb126017d4a725af3d1a6
SHA256: bf661cfeb53e6808afe2433c79f3091c2be683161ba1dd50f5f41145e56e3333
MD5: 33e8d03ed41ebb8c810bab8fa3a735f4

Signatures

Defense Evasion

T1027.002 packer_entropy: Probably contains compressed or encrypted data

Other

yara_rules: Static rules

no_graphical_activity: No graphic activity

pe_overlay: PE file contains overlay