Snatch
Snatch is a ransomware which infects victims by rebooting the PC into Safe Mode. Most of the existing security protections do not run in Safe Mode so that it the malware can act without expected countermeasures and it can encrypt as many files as it finds. It uses common packers such as UPX to hide its payload.
Victims
142
First Victim
2021-11-29
(est. attack date)
Discovery Date
2021-11-29
Last Seen
2024-05-16
Inactive Since
2yrs
more than
Avg Delay
1.8
days
Infostealer
73.0%
victims with domain
Countries
20
hit
Uptime
0.0% avg (30d)
Known Locations (5)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
News | No | 2026-08-22T08:07:20 |
hl66646wtlp2naoqnhattngigjp5palgqmbwixepcjyq5i534acgqyad.onion
|
||||
|
Access Denied | No | 2026-08-22T08:07:12 |
snatch.press
|
||||
|
News | No | 2026-08-22T08:07:26 |
snatchteam.top
|
||||
|
Origin DNS error snatchteam.cc Cloudflare | No | 2026-08-22T08:07:31 |
snatchteam.cc
|
||||
|
Just a moment... | No | 2026-08-22T08:07:38 |
snatchnews.top
|
Target
Top 5 Activity Sectors
- Professional Services 29
- Manufacturing 28
- Healthcare 16
- Education 11
- Financial Services 10
Top 5 Countries
-
United States
28
-
United Kingdom
7
-
Canada
6
-
India
5
-
France
3
Heatmap
Ransom Notes (1)
Tools Used
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
|
|
|
|
|
Cobalt Strike
Meterpreter
|
|
BCDEdit
ServiceControl (sc.exe)
|
|
KQL Query (1)
-
Snatch – Reboot into Safe Mode Followed by Security Service Stop (Origin Case)
Defense Evasion
Sentinel
T1489
YARA Rules (1)
Indicators of Compromise (IoCs) (2)
Email
2
| Type | IOC |
|---|---|
Email
|
2020host2021@tutanota.com
|
Email
|
legalrestore@airmail.cc
|
Victims (142)
More information in our telegram channel https://t.me/snatch_teamRishi Sunak, Prime Minister of the …
More information in our telegram channel https://t.me/snatch_teamCharles III, the KingCamilla, the Q…
MIKI Travel has a dedicated team of hundreds of multilingual, professional staff, providing sales, c…
Retirement Line is the UK's largest pension income broker*. We are committed to helping you make the…
Butler, Lavanceau & Sober, LLC is a certified public accounting firm centrally located in Columbia, …
Dürfen wir uns vorstellen? Wir sind Evelyn und Rainer Dörr. Wir sind Spezialisten für Supersportwage…
Seven Seas is a global maritime services group that specializes in providing general ship supplies, …
180 GB , 205,877 Files, 25,598 Folders of confidential information has been moved to our servers.dat…
Hawbaker Engineering was born from a desire to build upon our wealth of construction experience, inc…
More information in our telegram channel https://t.me/snatch_teamIf you are wary of downloading info…
More information in our telegram channel https://t.me/snatch_teamIf you are wary of downloading info…
More information in our telegram channel https://t.me/snatch_team Persons responsible for data leaka…
Malabar Group was founded in 1993 by a team of enterprising entrepreneurs, led by the visionary geni…
Grupo Promerica es un conjunto de instituciones financieras enlazadas a través del holding PROMERICA…
For 150 years, Kraft Heinz has produced some of the world's most beloved products. We are one of the…
Founded in 2007, Spaulding Clinical is a full-service, state-of-the-art paperless Phase I clinical p…
Jerry Pate Company is the premier provider of outdoor beautification products in the Southeast and M…
The Maldives Ports Limited brings together decades’ experience in commercial maritime trade in the I…
Montachusett Regional Vocational Technical School, also known as Monty Tech, is a grade 9 (age 14–15…
The Museum für Naturkunde Berlin has a long and eventful history - it has seen days of glory and sur…
We are a global innovator of unique interventional medical devices, committed to continuing the deve…
We built our name on providing generations of families with wholesome, great-tasting chicken. But to…
HGA is a multi-disciplined project management and engineering services company providing professiona…
The Canadian Psychological Association (CPA) is the primary organization representing psychologists …
The Detroit Symphony Orchestra, America’s fourth-oldest, has a history as varied and exciting as tha…
M&N Management has been in business for greater than 25 years. What makes M&N Management unique is o…
As a private Catholic elementary school, Ancillae-Assumpta Academy has a clearly articulated and rig…
Dal 1949 COGAL INDUSTRY® produce una vasta gamma di biancheria per la casa in Italia. L'azienda si è…
Alliance College-Ready Public Schools is committed to building an anti-racist, pro-Black community t…
Watching over and advocating for our state’s veterans and their families are the more than 1,100 men…
We are produly present over 10TB ofcommercial data (customer data, finance) for Knight Barry Title I…
More information in our telegram channel https://t.me/snatch_info Persons responsible for data leaka…
Military contracts, internal call signs and personal data…
Tampa General Hospital is a private not-for-profit hospital and one of the most comprehensive medica…
Seasia has established itself as an industry-leader when it comes to offering efficient, tailor-made…
Ningbo Joyson Electronic Corp. is one of the best automotive suppliers for the world's leading autom…
The Wasserstrom Company, which began as a local, family-run business, has steadily grown to become o…
Newly Reduced Tuition Makes MUA Accessible and Affordable. It is a great time to get started on your…
Tetrosyl Limited is the largest manufacturer and supplier of car care products in Europe and is the …
We are a British manufacturer, committed to the continuous innovation of our extensive range of spec…
Bunker Hill Community College (BHCC), located in Boston, Massachusetts, is the largest community col…
Fullerton India offers a range of calculators to help you make an informed decision regarding the be…
Since 1986, Hemenway Associates, Inc. has provided a comprehensive offering of wealth management, ta…
MCNA is dedicated to promoting high-quality and cost-effective oral health by increasing access to d…
Die Prep Services Final Test Wafer Sort Flip Chip TF AMD Penang is Flip Chip power house that offers…
GRS provides personalized management services for its clients across a broad range of business secto…
ELITech Group is an integrated in-vitro diagnostics company that serves hospitals and diagnostic lab…
Mount Desert Island Hospital serves a close-knit island and surrounding communities through a 25-bed…
We help ambitious businesses land and expand in record time without huge set up costs, compliance he…
Avant Grup, has a wide network of operational bases distributed in different cities in order to cove…
The company was named SsangYong Motor Company in 1988, following its acquisition by the chaebol Ssan…
Chattanooga State is a special place designed to give you an inviting setting to learn and gather wi…
Comoli Ferrari è uno dei maggiori distributori di soluzioni per l’impiantistica elettrica e idroterm…
CNA is a powerhouse nursing organization leading the development of health policy across Canada. Rep…
LiveAction’s Network Intelligence platform transforms complex data into actionable insights, providi…
Asia Vital Components Co., Ltd. (AVC) was founded in 1991. We are a listed company in the Taiwan Sto…
The history of Lawrence Family Development, Inc. (LFD, Inc.) begins with the founding of the Lawrenc…
Americana Restaurants is a trailblazer in the MENA region and Kazakhstan’s Out of Home Dining indust…
Beginning with just two buildings in 1964, by the end of the 1970s a total of 10 buildings graced th…
Proudly serving, protecting and partnering with our community for a safer Modesto.…
The Metropolitan Opera is a vibrant home for the most creative and talented singers, conductors, com…
For more than 25 years, we’ve been a dedicated partner to leading automotive brands around the world…
Founded in 2013 by a physician-turned-entrepreneur, Physician Partners of America aims to offer pati…
Il CTG è un' associazione nazionale senza scopo di lucro che promuove e realizza un progetto educati…
Square Yards is India’s largest integrated platform for Real Estate & Mortgages and one of the faste…
The TCL Chinese Theatre is the most iconic movie palace in the world. With over 50 events a year, in…
Trubee, Collins & Co., Inc. is one of the oldest, independently-owned Financial Services in Western …
Stratford University offers Associates, Bachelors, and Masters degrees in business administration; c…
Atlantic Dialysis Management Services, LLC (“ADMS”) was established to provide new dialysis site dev…
Yip In Tsoi is an enterprise located in Thailand, with the main office in Bangkok , Special Governed…
Warren Resources’ properties include high-quality, low-decline conventional oil and natural gas asse…
Back in 1954, a man named Ray Kroc discovered a small burger restaurant in California, and wrote the…
Thomson Broadbent provides high quality advice to homeowners, developers, private estates and landow…
Hall Cross is an historic institution which is proud of its traditions but what motivates us every d…
SSN_1.csv; PATIENTCONTACTS_VIEW.csv; IB_Appointment_Info.csv; location.csv; etl.csv; guarantor-2.csv…
Hanon Systems manufactures a variety of automotive air control equipment. The Company's products inc…
Since 1985 Premium Transportation Group, Inc. has consistently partnered with logistics companies to…
With over 196 locations in 22 states, InTown Suites is America’s largest wholly owned economy extend…
Very incompetent in negotiations
Chatlog will be added soon same as names of employees who told us "…
With 250+ employees across the U.S., we offer direct hire recruiting, contract and staff augmentatio…
ABC Seamless has installed durable and beautiful steel home products since 1978
Our proven home impr…
Medical Pharmacies is the leader in medication management, specialty pharmacy services and providing…
Altrux Medical was established in 2006 and is headquartered in Atlanta, Georgia. We are a family own…
Today, Fittingbox employs more than 80 people around the world, and counts more than 4,000 businesse…
Formed at the heart of UAE in 1973 by the vision of Mr. Ibrahim Saeed Ahmed Lootah who hails from a …
CareFirst BlueCross BlueShield Community Health Plan District of Columbia (CareFirst CHPDC) is a for…
The first Volvo car rolled off the Gothenburg production line in Sweden in 1927. Since then, Volvo C…
QRS INC. was founded in 1983 to help providers become profitable and to support them in their goals …
Recognized as one of the fastest growing, and most innovative, small businesses in the State of Wash…
Led by Phillip A. Bock, the attorneys at Bock Law Firm, LLC d/b/a Bock Hatch & Oppenheim, LLC have m…
When Paul Stephens founded Landmark Builders in 1975, he was determined to make his company “the pre…
Our Centers of Excellence are based in the USA and Mexico. We machine hard metals and aluminum alloy…