Snake malware coverage

[paul3829]

I am trying to determine which McAfee DAT file covers SNAKE malware. we are at 9516

[AdithyanT]

Hi @paul3829,

Thank you for your post. I am afraid the answer may not really be that simple as we are not very clear as to what variant we are specifically looking for and which specific threat actor we are looking into. I do not find any known list of IOCs at the top of my head, but here is something I came across by googling:

e5262db186c97bbe533f0a674b08ecdafa3798ea7bc17c705df526419c168b60

Considering this is an IOC of SNAKE Ransomware as per this third party link, we detect it as Trojan-Ransom.B using both VSE and ENS. This particular file's detection was added a month ago and hence any updated endpoint with V2 or V3 definitions should be able to detect this file.

9516 V2 DAT for VSE should definitely cover this specific file!

If you have any reliable report with IOCs to confirm coverage from McAfee's end, please feel free to share and I will be very glad to be of assistance on the same.

I sincerely hope this information is helpful.