General

  • Target

    2024-06-20_73798321094321d96f4cf343b43519b8_poet-rat_snatch

  • Size

    11.3MB

  • MD5

    73798321094321d96f4cf343b43519b8

  • SHA1

    2aaffa7c0998cccf6873ab84239fbb2cc6192fe6

  • SHA256

    f1aa83013c7412327ffb2b075941435efc84d3eb1fcbdc93c8b48721cd97cbda

  • SHA512

    65b0d1e7604946301a7b2fcefb603467098a4c972f1f0042df513d02a957a370d930fa3052c0fb64da740d75ad1593b22c9ab14afd60e279853c3cb47aba8bb7

  • SSDEEP

    98304:jBI2kvB3oqi12SFjEYXwNh3bmArE4zz1rpALQ6cr0HvfZ8SAu/V:1hzwFrnw4P1pALQ6c0Pf/Aut

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables referencing many varying, potentially fake Windows User-Agents 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-20_73798321094321d96f4cf343b43519b8_poet-rat_snatch
    .exe windows:6 windows x64 arch:x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections