Analysis
-
max time kernel
139s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
22-08-2024 21:45
General
-
Target
2024-08-22_852e72ddfd09669d01ee8e63538ef90d_poet-rat_sliver_snatch.exe
-
Size
18.2MB
-
MD5
852e72ddfd09669d01ee8e63538ef90d
-
SHA1
2839ad2e1c64b81e774ec77ac3574547f6b4718e
-
SHA256
7bd73a43bd1091830e5976cc16fc0f957973b743acf1b6d74586365f7dabba6b
-
SHA512
3dd8693af57a955cb2e22c68397f1d11365b61fdda3499235555198c0fe6be0f5bc05eee18bbc1ed73475076d68a818a15f11163eee6f040c222a903961efba4
-
SSDEEP
98304:niAvEZjWJV/7Df6Z8ZQRr7/M+LFHitbWRgT/f4BTbIlSey1HEdlzMfkV4o44SsVr:nxWWT/PCWZgr7O1gdIlckdpMMmi9
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-22_852e72ddfd09669d01ee8e63538ef90d_poet-rat_sliver_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-22_852e72ddfd09669d01ee8e63538ef90d_poet-rat_sliver_snatch.exe"1⤵
- Suspicious use of AdjustPrivilegeToken