CVE Intelligence

snatch Ransomware

🔔 Create alert

Tracked since Nov 29, 2021

0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity

Snatch is a ransomware which infects victims by rebooting the PC into Safe Mode. Most of the existing security protections do not run in Safe Mode so that it the malware can act without expected countermeasures and it can encrypt as many files as it finds. It uses common packers such as UPX to hide its payload.

Vulnerabilities cited for this group

CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.

No CVE associated with this group in the sources.

Observed tools

LOLBAS
BCDEdit · ServiceControl (sc.exe)
Offsec
Cobalt Strike · Meterpreter

Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live