Snatch

Description

Snatch is a ransomware which infects victims by rebooting the PC into Safe Mode. Most of the existing security protections do not run in Safe Mode so that it the malware can act without expected countermeasures and it can encrypt as many files as it finds. It uses common packers such as UPX to hide its payload.

External Analysis
https://t.me/snatch_news
https://blog.intel471.com/2020/05/21/a-brief-history-of-ta505/
https://github.com/albertzsigovits/malware-notes/blob/master/Snatch.md
https://intel471.com/blog/a-brief-history-of-ta505
https://news.sophos.com/en-us/2019/12/09/snatch-ransomware-reboots-pcs-into-safe-mode-to-bypass-protection/
https://news.sophos.com/en-us/2022/03/17/the-ransomware-threat-intelligence-center/
https://thedfirreport.com/2020/06/21/snatch-ransomware/
https://ti.qianxin.com/uploads/2020/02/13/cb78386a082f465f259b37dae5df4884.pdf
https://twitter.com/VK_Intel/status/1191414501297528832
https://www.bleepingcomputer.com/news/security/snatch-ransomware-reboots-to-windows-safe-mode-to-bypass-av-tools/
https://www.crowdstrike.com/blog/financial-motivation-drives-golang-malware-adoption/
https://www.cyborgsecurity.com/cyborg_labs/hunting-ransomware-inhibiting-system-backup-or-recovery/
https://www.secureworks.com/blog/ransomware-groups-use-tor-based-backdoor-for-persistent-access
Urls
Screen
http://hl66646wtlp2naoqnhattngigjp5palgqmbwixepcjyq5i534acgqyad.onion
Screen
https://snatch.press/
Screen

Posts

Date Title Description
2023-03-02
The Metropolitan Opera The Metropolitan Opera is a vibrant home for the most creative and talented singers, conductors, composers, musicians, stage directors, designers, visual artists, choreographers, and dancers from around the world.
2023-02-27
Ingenico We help you navigate a new world of commerce, in which verticalisation, expanded services, and digital players are transforming the payments landscape. We are the trusted partner of financial institutions, retail chains and small merchants alike, supplying them with simple and reliable payments solutions.
2023-02-27
MSX International For more than 25 years, we’ve been a dedicated partner to leading automotive brands around the world. We support them in transforming their businesses and in managing their operations across the areas of Customer Experience, Repair Optimization, Learning and Insights.
2023-01-12
Physician Partners of America Founded in 2013 by a physician-turned-entrepreneur, Physician Partners of America aims to offer patients a safe, seamless healthcare experience and doctors who can totally focus on patients. Physician Partners of America offers pain management, orthopedics, minimally invasive laser spine surgery, mental health counseling. We are
2022-12-28
Centro Turistico Giovanile Il CTG è un' associazione nazionale senza scopo di lucro che promuove e realizza un progetto educativo e di formazione integrale della persona, attraverso momenti di crescita, di impegno e di aggregazione sociale, ispirandosi alla concezione cristiana dell'uomo e della vita, nel servizio alle persone
2022-12-28
ET GLOBAL We showcase your brands worldwide – with precision and great attention to detail. Therefore, you will find us in major cities around the world.
2022-12-28
Square Yards Square Yards is India’s largest integrated platform for Real Estate & Mortgages and one of the fastest growing Proptech platform in UAE, Rest of Middle East, Australia & Canada. Square Yards platform offers an integrated consumer experience & covers the full real-estate journey from search
2022-12-28
TCL Chinese Theatres The TCL Chinese Theatre is the most iconic movie palace in the world. With over 50 events a year, including movie premieres, imprint ceremonies, and film festivals, the theatre continues to make Hollywood history every day.
2022-12-28
Trubee, Collins & Co Trubee, Collins & Co., Inc. is one of the oldest, independently-owned Financial Services in Western New York. Established in 1940, Trubee, Collins & Co., Inc. has earned the respect of our clients by demonstrating competence, integrity and a solid long term investment philosophy. The company
2022-12-28
Einatec Nuestros equipos han desarrollado desde aplicaciones multiplataforma hasta grandes infraestructuras IT. Y nuestras mentes creativas se encargan del branding, diseño y el marketing de nuestros clientes.
2022-11-27
STGi STGi was established in 1997 in the home basement of Founder, President, and CEO Michelle S. Lee. Since its humble beginnings, STGi graduated from the 8(a) program in 2008 and has grown into a large, national firm which specializes in the areas of healthcare services,
2022-11-21
McGRATH Founded in 1979, McGrath is a diversified business-to-business rental company that rents and sells relocatable modular buildings, storage containers and offices, electronic test equipment, and liquid and solid containment tanks and boxes. We operate through five divisions: Mobile Modular, Mobile Modular Portable Storage, TRS-RenTelco, Adler
2022-11-21
SAIPRESS Smartphone game app maker.
2022-11-14
YASH Technologies YASH Technologies is a leading technology integrator specializing in helping clients reimagine operating models, enhance competitiveness, optimize costs, foster exceptional stakeholder experiences and drive business transformation.
2022-11-13
Saurer Saurer is a leading globally operating technology company focusing on innovations for the processing of fibre and yarn, including machinery, components and software. We partner with customers, providing smart fit-for-purpose solutions to help our clients achieve their business aspirations.
2022-11-02
Grandview, MO Our history is deeply rooted dating back to the 1800s. Local legend has it that the community’s earliest leaders looked upon the rolling hills of the area and said, “Isn’t it a grand view?” Hence, the name for this quaint community located minutes south of
2022-10-30
HENSOLDT France We established our first footprint in France with our site in the city of Plaisir, the headquarters of HENSOLDT France SAS, specialists for the latest generation of identification friend-or-foe (IFF) technology. In 2019, the former NEXEYA Group became part of HENSOLDT, further developing our wide
2022-10-24
Kenosha Unified School District The Kenosha Unified School District was created in 1967. The District includes the City of Kenosha, Village of Pleasant Prairie, and Town and Village of Somers. While it is called the Kenosha Unified School District, it is actually a common school district and holds an
2022-10-19
Weidmuller Our industrial environment is full of connections that need to be connected, controlled and optimised. We are absolutely committed to always providing the best connection possible. This is not only demonstrated in our products but also in the human connections we maintain: We develop solutions
2022-10-05
OPPLE Lighting At OPPLE we bring affordable and good quality LED lighting products from our European warehouses to you. We work with the most professional and recognized distribution partners to specify and distribute OPPLE products in the most efficient way to you.
2022-10-05
Empower Insurance Empower Insurance is proud to be represented by thousands of skilled independent insurance agents who are ready to assist you in your car insurance. Since 2003, we have served millions of Texans by understanding their auto insurance needs and delivering quality coverage at a great
2022-10-05
Unicity Unicity began as one product, but it has since become a thriving global movement that promotes good health and wellness for millions. While Unicity has grown, our purpose—make life better—has remained the same.
2022-10-05
Oil India Limited Oil India Limited (OIL) is a fully integrated Exploration & Production company in the upstream sector, with origin dating back to the glorious year (1889) of oil discovery in India. A Navratna Company, OIL is a state-owned enterprise of the Government of India, under the
2022-08-18
McDonald's
2022-08-18
Stratford University Stratford University offers Associates, Bachelors, and Masters degrees in business administration; computer science and information technology; hospitality and culinary arts; health sciences; and nursing.
2022-07-02
Apex Established in April 1975, we started the design model business for home appliances. Since our founding, we have worked on many design and working models in many industries such as home appliances, office automation equipment, automobile parts, medical equipment, and amusement equipment as a company
2022-07-02
Atlantic Dialysis Management Services Atlantic Dialysis Management Services, LLC (“ADMS”) was established to provide new dialysis site development, day to day administration and management of dialysis services and related business development activities. The business strategy is to maximize individual site results through consolidated activities. Central to the
2022-05-22
HEMERIA At HEMERIA, we design and manufacture high-dependability, high-tech equipment and systems for the very exacting requirements of the space industry and France’s nuclear deterrence force.
2022-03-31
Yip in Tsoi
2022-03-07
Xtera Xtera deliver submarine cable solutions that maximise optical capacity and capability from seabed to city through outstanding expertise, know-how and technology innovation that is underpinned by leading-edge research and development.
2022-03-07
Warren Resources Warren Resources’ properties include high-quality, low-decline conventional oil and natural gas assets in the core of the Wilmington Field, in L.A. County, CA. Our value-driven strategy focuses on continuously generating capital efficiencies and operation with low production and G&A costs, with a disciplined approach to
2022-03-03
Private company #2
2022-02-25
McDonald's
2022-02-19
CIELD
2022-02-19
PFEIFER Drako
2022-02-09
PetroVietnam
2022-02-02
Overseas Travel Agency
2022-01-27
Mab Group
2022-01-27
Thomson Broadbent
2022-01-18
Vehicle Service Group
2022-01-18
Hall Cross Academy Hall Cross is an historic institution which is proud of its traditions but what motivates us every day is securing the best future for every one of the young people we serve. A large and vibrant comprehensive academy with nearly 2000 students on roll including approximately
2022-01-16
Private Company
2022-01-13
Hanon Systems
2022-01-13
HAPOLO
2022-01-11
TaxNetUSA
2022-01-05
Premium Transportation Group
2021-12-28
LAVA Lava International Limited is a leading Mobile Handset Company in India and has expanded its operations to multiple countries across the world. Right from its inception Lava has been at the forefront of building a strong ecosystem of design and manufacturing of mobile handsets. The
2021-12-28
TUI UK
2021-12-21
Leuze
2021-12-21
InTown Suites
2021-12-20
Skyxe Saskatoon Airport
2021-12-14
The Execu|Search Group With 250+ employees across the U.S., we offer direct hire recruiting, contract and staff augmentation, and workforce solutions for companies of all sizes. Our healthcare, technology, pharmaceutical, and professional services teams are each led by recruiters who are truly specialized in their respective fields.
2021-12-14
ABC Seamless
2021-12-10
Medical Pharmacies
2021-12-07
Altrux Medical
2021-12-07
Fittingbox
2021-12-02
Lootah Group Formed at the heart of UAE in 1973 by the vision of Mr. Ibrahim Saeed Ahmed Lootah who hails from a Founding Family in Dubai, Lootah Group has consistently grown to become an international corporation with a strong world-wide presence. A 47-year old global conglomerate,
2021-12-02
CareFirst CHPDC
2021-11-30
Volvo Car Corporation
2021-11-30
QRS Healthcare Solutions
2021-11-29
Amtech Corporation
2021-11-29
APG Neuros
2021-11-29
Salinen Austria
2021-11-29
Ishida
2021-11-29
Arbitech
2021-11-29
Daylesford Organic On our organic farms in the Cotswolds and Staffordshire, we work the land responsibly, mindfully, with intelligence and with a conscience. We hold ourselves accountable for our ethical and environmental standards and welcome the opportunity to show you what we do. Raising our animals and handling
2021-11-29
Bock, Hatch, Lewis & Oppenheim, LLC
2021-11-29
Landmark Builders
2021-11-29
Match MG
2021-11-29
Cadence Aerospace