Analysis
-
max time kernel
139s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12-08-2024 07:02
General
-
Target
2024-08-12_5631e59aa0896603851b4c846a7f42ea_poet-rat_snatch.exe
-
Size
14.4MB
-
MD5
5631e59aa0896603851b4c846a7f42ea
-
SHA1
9c8152f69d05c2fbf4523671e90374dc8beed0e2
-
SHA256
dccfaf12c6fbd0fbe1675fefb6af90511ba0cb283fb545692e01de447cff1a95
-
SHA512
bdd76bf7f98d389c6e228fe66d738bf8d2cfb4a9c0787a8d668ddbe01203d02070e631a29809d01073214cfbd58268b43952cb953322e6c8df729008ab8ea955
-
SSDEEP
196608:e/nhdqw5YFzrIujXhzkSuqNY1/Y229WYWUf:InDqwozrIuLHDS/YFI
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-12_5631e59aa0896603851b4c846a7f42ea_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-12_5631e59aa0896603851b4c846a7f42ea_poet-rat_snatch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses