Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
24-07-2024 10:02
General
-
Target
2024-07-24_138dbe66343b73552e80c461bc575dd6_poet-rat_snatch.exe
-
Size
6.2MB
-
MD5
138dbe66343b73552e80c461bc575dd6
-
SHA1
1345e01a18f7c28398c39bde98b37a624997eb7f
-
SHA256
862305d116b844285904c0d083b0399d4b6e9f3f03d6d0aba7051d6a75dd7d54
-
SHA512
6845a4715bf474d4ec6a62c929b7c1b7162fb7456491b966e4f301475450de594c6afb1727601f068ebc370d14e7c39cd6b53ca8229f0cc95ecea58f8c7c2f97
-
SSDEEP
98304:n1W7IpuQbSkwrMZnXviuPjqmOXh51YcyDIn:n1W76+rIXviu7qm+NPn
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-24_138dbe66343b73552e80c461bc575dd6_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-24_138dbe66343b73552e80c461bc575dd6_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery