General
-
Target
2024-09-05_834d4361df57ab70657a0ad7a469952f_poet-rat_snatch_zxxz
-
Size
27.9MB
-
Sample
240905-wz9bkawhll
-
MD5
834d4361df57ab70657a0ad7a469952f
-
SHA1
8ba395c443940e6db54a255fa3ddfbe0fab88b59
-
SHA256
2d272ac67fab94e2d70ba5ecc897acac5626a272743b7fa5da05aa8fae9a1d63
-
SHA512
67ef23d53c11e226500181c34e3fc6a6ea0ed185ce9c92cccbf4523777ca361b6f033ecc71bc710d2603ddb61f191a6d0443702dacbdae6ecb98550aa82202cc
-
SSDEEP
196608:dzO+Q6tniZQ78sFB/iBi8eZvuMGpy36kYg0vdi:fti27zFiemmGi
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-05_834d4361df57ab70657a0ad7a469952f_poet-rat_snatch_zxxz.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://fisstyconsumerosp.shop/api
Targets
-
-
Target
2024-09-05_834d4361df57ab70657a0ad7a469952f_poet-rat_snatch_zxxz
-
Size
27.9MB
-
MD5
834d4361df57ab70657a0ad7a469952f
-
SHA1
8ba395c443940e6db54a255fa3ddfbe0fab88b59
-
SHA256
2d272ac67fab94e2d70ba5ecc897acac5626a272743b7fa5da05aa8fae9a1d63
-
SHA512
67ef23d53c11e226500181c34e3fc6a6ea0ed185ce9c92cccbf4523777ca361b6f033ecc71bc710d2603ddb61f191a6d0443702dacbdae6ecb98550aa82202cc
-
SSDEEP
196608:dzO+Q6tniZQ78sFB/iBi8eZvuMGpy36kYg0vdi:fti27zFiemmGi
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of SetThreadContext
-