Analysis
-
max time kernel
150s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
30-06-2024 15:30
General
-
Target
2024-06-30_6df5ba5e3be8aa571b02cb826c50b881_poet-rat_snatch.exe
-
Size
6.3MB
-
MD5
6df5ba5e3be8aa571b02cb826c50b881
-
SHA1
5c56a94f6c591856271680e5e1b69efd71671825
-
SHA256
b40b9dfadc0df0ea9ba39164d620429b77b7f59b7ab456ce8a201c1bf07a0054
-
SHA512
09d23e2ce1b88bf207ba001711944185f444406aaf7bc21f1ea470e8b4843117c081f2e95703f79fbda7f014b8ce244537b9b96edb7be993632e48ac5bc9a6fb
-
SSDEEP
49152:grJJUCiHyeyohuTqhpvEQ/71BV+H08koKk0P4RZq7gSjw85EiO4qlH0hftL5N0Hz:NHyMEGf71B0FNJiEiO0Rl+Jq
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-30_6df5ba5e3be8aa571b02cb826c50b881_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-30_6df5ba5e3be8aa571b02cb826c50b881_poet-rat_snatch.exe"1⤵
- Suspicious use of AdjustPrivilegeToken