General

  • Target

    2024-06-09_3c488d5029e65de45e3455c42beb9267_poet-rat_snatch

  • Size

    5.9MB

  • MD5

    3c488d5029e65de45e3455c42beb9267

  • SHA1

    58e2fb792bd402a4ac939a4d35607f1d9984e13c

  • SHA256

    c4d314885036215399afde174f96ce0de81682e6b3f835809571cb89bc2df793

  • SHA512

    09f40ddede8aa9835e9e50e5ab67841a4e6532ae8d1180d56367b7e76b1f47a8b3a1c2665b3b804c3452096721df2700145f4bfd78fb3ac130560c37b5593605

  • SSDEEP

    49152:PhAnAwJxYcRx/+MJLGq/lZ3lwn0E1BDVnuJFlt89LbVijqyQEbniRDQ2ut64:JAnAsDb/+MJLv9FltCAba06

Score
10/10

Malware Config

Signatures

  • Detects executables containing possible sandbox system UUIDs 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • Detects executables referencing virtualization MAC addresses 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-09_3c488d5029e65de45e3455c42beb9267_poet-rat_snatch
    .exe windows:6 windows x86 arch:x86

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections