ac1adb8ce2fbd2a5a4496711a7df6d75a9a8d1e98d8b04bbe1a74c8d81fa6859 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-09_707f12266f9ddcbdb4ba84dc59cfc8de_poet-rat_snatch
Size

5.8MB
Sample

240709-zphyeawhqh
MD5

707f12266f9ddcbdb4ba84dc59cfc8de
SHA1

3f605da3a2d580d820965ef005d7690bc615ddc2
SHA256

ac1adb8ce2fbd2a5a4496711a7df6d75a9a8d1e98d8b04bbe1a74c8d81fa6859
SHA512

845acdeaf8737aca8d2c385bf5e3fb0fa76cfa23b844444795146a1c31d4af6472f8b1c02e4cf5c7cc811ace59b891277850894f45104afec1c8e3ca0ce7d316
SSDEEP

49152:vzlnEcO3Cgrb/TbvO90d7HjmAFd4A64nsfJa/pJMBMvDF/4q4auspdkgKKhdvZfd:63CE/Xx4LKhdknESp

Score

7^/10

Malware Config

Targets

- Target
  
  2024-07-09_707f12266f9ddcbdb4ba84dc59cfc8de_poet-rat_snatch
- Size
  
  5.8MB
- MD5
  
  707f12266f9ddcbdb4ba84dc59cfc8de
- SHA1
  
  3f605da3a2d580d820965ef005d7690bc615ddc2
- SHA256
  
  ac1adb8ce2fbd2a5a4496711a7df6d75a9a8d1e98d8b04bbe1a74c8d81fa6859
- SHA512
  
  845acdeaf8737aca8d2c385bf5e3fb0fa76cfa23b844444795146a1c31d4af6472f8b1c02e4cf5c7cc811ace59b891277850894f45104afec1c8e3ca0ce7d316
- SSDEEP
  
  49152:vzlnEcO3Cgrb/TbvO90d7HjmAFd4A64nsfJa/pJMBMvDF/4q4auspdkgKKhdvZfd:63CE/Xx4LKhdknESp
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2