Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12-09-2024 12:26
General
-
Target
2024-09-12_3fa475d643ad688db274ff6dbabe7d1e_poet-rat_snatch.exe
-
Size
10.0MB
-
MD5
3fa475d643ad688db274ff6dbabe7d1e
-
SHA1
972470d85d3567bf948ccd641fa014fcfe31b403
-
SHA256
587ffe1c5cd3729bfc655d5781ad68d9d9ab2ab7925d84cc01ac70c7ca6e0f35
-
SHA512
9414af0df6c0125b10f2e3a5afb5c919855039c83ea7cccdfb9c9ab0707f69dc51077f0635a0fdc10ca5a0922341d9ed923d44c9deb3d7af8dea7d926b1bcd22
-
SSDEEP
49152:YLLxDPw6uwPeha6BUUja5Ek9ISTlLt248pfhmHRdj2RGNl/7NAfgCZ6O+wHrE84g:iDPgPa6anEQZ5t2fhORdj2R0pGZV1zF
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-12_3fa475d643ad688db274ff6dbabe7d1e_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-12_3fa475d643ad688db274ff6dbabe7d1e_poet-rat_snatch.exe"1⤵
- Suspicious use of AdjustPrivilegeToken