General

  • Target

    202409122adb55dd2dbb6f50de78f19d158a1302poetratsnatch

  • Size

    9.8MB

  • MD5

    2adb55dd2dbb6f50de78f19d158a1302

  • SHA1

    88d59831897c608da2317c70e412124dc93d12eb

  • SHA256

    cb70b5efc101cc7446faa510535b759dd3d31d6a18ac343bf36827111373767b

  • SHA512

    2b4a7c90bba4f87aa646ae7a2809862bbd901afe34cd97a90f49805a6ab7be02b1f6f6cdef25ed89bd1b8007a6782e2d259e37156c1fcf651fd544019d37425f

  • SSDEEP

    98304:M60jb2AWIDomQhwA2FKLhRmAY0py0E5XVgjgvCn1XoIx:RrAWIDxOTe5NNa

Score
10/10

Malware Config

Extracted

Family

thunderkittystealer

C2

https://api.telegram.org/bot7152695840:AAGDjisoA8pdr2R0G01XrqjqSwITZtC9buY/sendMessage?chat_id=6426393261

Signatures

  • Thunderkittystealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 202409122adb55dd2dbb6f50de78f19d158a1302poetratsnatch
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections