Overview

overview

9

Static

static

3

2024-08-29...ch.exe

windows7-x64

1

2024-08-29...ch.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-29_c404320fdc45c76897d4b1db03ee3820_poet-rat_snatch

  • Size

    14.2MB

  • Sample

    240829-v5v6fsshnb

  • MD5

    c404320fdc45c76897d4b1db03ee3820

  • SHA1

    eb113670b989acf7bb8752ee644d4477d4b4eb52

  • SHA256

    90eb8caf08915a10228d02b68b8aef8b527ed3133698398aa3b8358eb991df01

  • SHA512

    1441309984421e78bbbaacbfe6dccd7f64e342e009156c183aaa96dd7735b66099d85457ed9a8c5c35f5a616b393dbabc05c1ba58d91735254d0d72fcc374dcf

  • SSDEEP

    196608:Efu2T4bKmkNp8tU1h5unNLawjeYlA3fuQ/+Lt78UNPFs:sue22p8tU1h5wNWwjeZWQ/+58UNPFs

Score
9/10
credential_accessspywarestealer

Malware Config

Targets

    • Target

      2024-08-29_c404320fdc45c76897d4b1db03ee3820_poet-rat_snatch

    • Size

      14.2MB

    • MD5

      c404320fdc45c76897d4b1db03ee3820

    • SHA1

      eb113670b989acf7bb8752ee644d4477d4b4eb52

    • SHA256

      90eb8caf08915a10228d02b68b8aef8b527ed3133698398aa3b8358eb991df01

    • SHA512

      1441309984421e78bbbaacbfe6dccd7f64e342e009156c183aaa96dd7735b66099d85457ed9a8c5c35f5a616b393dbabc05c1ba58d91735254d0d72fcc374dcf

    • SSDEEP

      196608:Efu2T4bKmkNp8tU1h5unNLawjeYlA3fuQ/+Lt78UNPFs:sue22p8tU1h5wNWwjeZWQ/+58UNPFs

    Score
    9/10
    credential_accessspywarestealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks