General

  • Target

    2024-06-28_afc9647d4602e05eb8c55e6abb9019ad_poet-rat_rex_snatch

  • Size

    21.5MB

  • MD5

    afc9647d4602e05eb8c55e6abb9019ad

  • SHA1

    13489de2ab2d86b1ab4c824d69971bfa5819cb83

  • SHA256

    678ea1f1d1b10f2575cd9d836cbd7ca6f875b22b37ad2db81186560170336198

  • SHA512

    adcc428c7665d209cf6b355608cfcaa4dfc2702bf3ac3f8a7227484740ca11abd543f6b19a247864ffc1aae034a7de314db72350f46bff9f01999e842a2c6d22

  • SSDEEP

    98304:y4iipjP5oCFx33PllYaaN9EGuq0EXMlrDbmL4Mzag/Gp0QFnfoY0jSPcjni:ycoiYPR0E0bNMzGW5+

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-28_afc9647d4602e05eb8c55e6abb9019ad_poet-rat_rex_snatch
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections