Overview

overview

10

Static

static

10

2024-06-25...ch.exe

windows7-x64

1

2024-06-25...ch.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-25_66ee50d9bbe004a578516af604eb8ec3_poet-rat_sliver_snatch

  • Size

    9.6MB

  • MD5

    66ee50d9bbe004a578516af604eb8ec3

  • SHA1

    235d4d3e9491ef816055da9b1de724d3d849667d

  • SHA256

    558e0404348a1abcb7fb255655646e520f7c72287604abe78b876181eecb9087

  • SHA512

    39e188e662aaf5f05b6c7b5684cb0614669465c1e033174a3e686328f8bc8724430dff14a63b4e093eb7783f954201589bdbac496f4b08ebcf62760fa4537b61

  • SSDEEP

    49152:Uvd6czR1/AbTBCveKdAIZokb+lmHpcnIFLysIRNbQZRzOlTVGdsgsdXfrl71zVj2:UgTBuSIF276lSjTxX7EQ64inWjTd1K1

Score
10/10

Malware Config

Signatures

  • Detects executables referencing combination of virtualization drivers 1 IoCs
  • Detects executables referencing virtualization MAC addresses 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-25_66ee50d9bbe004a578516af604eb8ec3_poet-rat_sliver_snatch
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections