General
-
Target
2024-08-29_1cea78d965a4cb30ad55c5f6558d3c26_poet-rat_snatch
-
Size
20.4MB
-
Sample
240829-fbpdgstgph
-
MD5
1cea78d965a4cb30ad55c5f6558d3c26
-
SHA1
5d1c410fbd7172c17305818b61db85ffdd00a8f0
-
SHA256
c5d785d1551912803b69857b61227c231ce9b90d54fbc5055d5bf0dec794ec95
-
SHA512
f137dfba0096aea6db32cd079ab10cccb75542f9a8232296f5a5dd7309a1778e2c3402db3b915c0863981c734f1287cf4b7cee43c7138f335d8e8869025b7c62
-
SSDEEP
196608://rICSdjMbk9HA1mXAEYqvv/68UK9EbOIq0d:t4VA1mXfjXObHJd
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-29_1cea78d965a4cb30ad55c5f6558d3c26_poet-rat_snatch.exe
Resource
win7-20240708-en
Malware Config
Extracted
lumma
https://consideratisiqw.shop/api
https://interactiedovspm.shop/api
https://charecteristicdxp.shop/api
Targets
-
-
Target
2024-08-29_1cea78d965a4cb30ad55c5f6558d3c26_poet-rat_snatch
-
Size
20.4MB
-
MD5
1cea78d965a4cb30ad55c5f6558d3c26
-
SHA1
5d1c410fbd7172c17305818b61db85ffdd00a8f0
-
SHA256
c5d785d1551912803b69857b61227c231ce9b90d54fbc5055d5bf0dec794ec95
-
SHA512
f137dfba0096aea6db32cd079ab10cccb75542f9a8232296f5a5dd7309a1778e2c3402db3b915c0863981c734f1287cf4b7cee43c7138f335d8e8869025b7c62
-
SSDEEP
196608://rICSdjMbk9HA1mXAEYqvv/68UK9EbOIq0d:t4VA1mXfjXObHJd
-
Suspicious use of SetThreadContext
-