General
-
Target
2024-09-12_c38f34070dba4a37add078ad90b44186_poet-rat_snatch
-
Size
34.6MB
-
Sample
240912-qt7mwsxang
-
MD5
c38f34070dba4a37add078ad90b44186
-
SHA1
8314168eb3b3ab09d3c4c717a8db682c163b2bdd
-
SHA256
13667772ca04aff1e9a4a83453e612752dc242b5f247d381ddbd31eccfdd6e4a
-
SHA512
47acf8f7bcd2f3cba7713f5d990c1b3626e18595633cc60506ccd209448fbbd4ce65172c262d602fa3431cceb0deb8963d3197fce1d47a3cdf1d4433b64ec3dd
-
SSDEEP
196608:RR+LmXmPgXgeNzfdnCvh0074RHVGuLNnnLCSdQkAr9nTlw9GZPH17F0:7AUgeNwYVGYnLC63AhnRB517F0
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-12_c38f34070dba4a37add078ad90b44186_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://complainnykso.shop/api
https://basedsymsotp.shop/api
https://charistmatwio.shop/api
https://grassemenwji.shop/api
https://stitchmiscpaew.shop/api
https://commisionipwn.shop/api
Targets
-
-
Target
2024-09-12_c38f34070dba4a37add078ad90b44186_poet-rat_snatch
-
Size
34.6MB
-
MD5
c38f34070dba4a37add078ad90b44186
-
SHA1
8314168eb3b3ab09d3c4c717a8db682c163b2bdd
-
SHA256
13667772ca04aff1e9a4a83453e612752dc242b5f247d381ddbd31eccfdd6e4a
-
SHA512
47acf8f7bcd2f3cba7713f5d990c1b3626e18595633cc60506ccd209448fbbd4ce65172c262d602fa3431cceb0deb8963d3197fce1d47a3cdf1d4433b64ec3dd
-
SSDEEP
196608:RR+LmXmPgXgeNzfdnCvh0074RHVGuLNnnLCSdQkAr9nTlw9GZPH17F0:7AUgeNwYVGYnLC63AhnRB517F0
-
Suspicious use of SetThreadContext
-