General

  • Target

    2024-07-10_31fcfe752d30c3f9cfb212a5f58568a7_poet-rat_snatch

  • Size

    15.0MB

  • MD5

    31fcfe752d30c3f9cfb212a5f58568a7

  • SHA1

    e1c2fd2db1294153fe1ffcf7fa5d40f96767bad2

  • SHA256

    2b5bce8623468a2e58c6cc817c1556dd1ef69cb184083a2d8d68a1bb78cbc2d2

  • SHA512

    4341b3474fdec168565f45008495c194f310995452c71d7c92aec8427031b3c0e4b9b6d1217be5386d8ce9bc9eccfd862dada7fbb0e625b946a25997e4f355d6

  • SSDEEP

    196608:zvTCF+0B6s7Vq1QpUPZ7ubMgFKcnSJiZKi9m2gB6bIK6w3:3w+M6GVYQpUP0xnS0m2gB6bII

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/963128514779959316/ruqcIVO-IzGEWVxFyDIITM7YCzbyrnmAu55FnFdc4inoDqbx2o3dSOjAkc1lGOf9ytAfS

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-07-10_31fcfe752d30c3f9cfb212a5f58568a7_poet-rat_snatch
    .exe windows:6 windows x64 arch:x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections