General

  • Target

    2024-05-04_a3c057b50286126b8d73d9a31063c0d4_poet-rat_sliver_snatch

  • Size

    15.3MB

  • MD5

    a3c057b50286126b8d73d9a31063c0d4

  • SHA1

    104865279685b5bfb6cb3fa226a2fa71a07b9a43

  • SHA256

    38e10441db2fcc98cc142b11bd998ad7a1d5a44bca187b5c2a5701f0e638be1d

  • SHA512

    78b2a12c6e4de07d1abbf4104d74d614a7a544151cecf1355244c10a608b21700ee1f4aae825ae9a88a8fbb1eaa252d2575ac072814b5ebf7121cdfbf602c271

  • SSDEEP

    98304:zkgdSKdiVVYMXD9SETEkW1sg/Y3ZblurHGfjm2btI9hR8c:JiVVYMT9JAkxbj9evR

Score
10/10

Malware Config

Signatures

  • Detects executables packed with Themida 1 IoCs
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-04_a3c057b50286126b8d73d9a31063c0d4_poet-rat_sliver_snatch
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections