General
-
Target
2024-09-08_157285d52451f1fb8994de805c49103f_poet-rat_snatch
-
Size
13.4MB
-
Sample
240908-kcmcqswbjn
-
MD5
157285d52451f1fb8994de805c49103f
-
SHA1
fb4efc009c4675e7a3a1dcab7b6d3414e8c6283e
-
SHA256
78c9b9ff2baa00a98e1a16132f9130010506c997404c8b2b3c3db07971b7f790
-
SHA512
4ce66b9c7b855e9b029304ffb90bec16ac8576d3b04f5c0d002901b054d7fab2cd7f915b73c92eedb64e43fdbfcee51ab3a597a58aaaa814c7854706650713bc
-
SSDEEP
98304:/n4woD76tBuVIxuRZLDIaYefEHL2Z1+mGl:/FBuW0fDeHq0mG
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-08_157285d52451f1fb8994de805c49103f_poet-rat_snatch.exe
Resource
win7-20240729-en
Malware Config
Extracted
lumma
https://professinowpqqz.shop/api
https://condedqpwqm.shop/api
Targets
-
-
Target
2024-09-08_157285d52451f1fb8994de805c49103f_poet-rat_snatch
-
Size
13.4MB
-
MD5
157285d52451f1fb8994de805c49103f
-
SHA1
fb4efc009c4675e7a3a1dcab7b6d3414e8c6283e
-
SHA256
78c9b9ff2baa00a98e1a16132f9130010506c997404c8b2b3c3db07971b7f790
-
SHA512
4ce66b9c7b855e9b029304ffb90bec16ac8576d3b04f5c0d002901b054d7fab2cd7f915b73c92eedb64e43fdbfcee51ab3a597a58aaaa814c7854706650713bc
-
SSDEEP
98304:/n4woD76tBuVIxuRZLDIaYefEHL2Z1+mGl:/FBuW0fDeHq0mG
-
Suspicious use of SetThreadContext
-