Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
20/08/2024, 12:21
General
-
Target
2024-08-20_92d668a449d3db4c1f819e9db8f12ee0_poet-rat_snatch.exe
-
Size
8.5MB
-
MD5
92d668a449d3db4c1f819e9db8f12ee0
-
SHA1
425c8c9d3a03da29479cef053f453c0df74c731a
-
SHA256
3b11857716c86741002a54addd7ab97de7a1af8814fa1954d40d45b099615270
-
SHA512
5f919e63bc085feaee184e35f2ede5d269f690698d888d6d73c322c31dd0709989c79dc40fd7c080a93a4309162c6f43d07da88f12163c0698e5e2b3b1355db3
-
SSDEEP
98304:IxxLGXwzVN+rIOcCEWe078ayTojzbDQUa1G1/V7sPfhjS3CmEoF2T:IHHzN47yulmjsCmX2
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-20_92d668a449d3db4c1f819e9db8f12ee0_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-20_92d668a449d3db4c1f819e9db8f12ee0_poet-rat_snatch.exe"1⤵
- Suspicious use of AdjustPrivilegeToken