snatch Ransomware
Tracked since Nov 29, 2021
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
Snatch is a ransomware which infects victims by rebooting the PC into Safe Mode. Most of the existing security protections do not run in Safe Mode so that it the malware can act without expected countermeasures and it can encrypt as many files as it finds. It uses common packers such as UPX to hide its payload.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
LOLBAS
BCDEdit · ServiceControl (sc.exe)
Offsec
Cobalt Strike · Meterpreter
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live