Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
14/09/2024, 03:53
General
-
Target
2024-09-14_cd70cca7a4b52d43fea6f431ca70bb46_poet-rat_snatch.exe
-
Size
4.7MB
-
MD5
cd70cca7a4b52d43fea6f431ca70bb46
-
SHA1
90c3a75f734df975188bea6615ef0a029f0e3c85
-
SHA256
559622ab0f7178ab51c152ca6a75ffc4a779c63e30ded497a1de6cd73416623b
-
SHA512
83d05416948a64f989dd8ce50a9312ed39bb5c29efefa9b824948e1bbf0a95b415094c24e4931818c91d0ca932bdb548418169b7e40da0d2d33c1b1389648a66
-
SSDEEP
49152:sTlarPdhUbs95X2Io0V6Eertg4Pn5Uojg+sW6CcDehtKyjV5ENeiTDyBxPdMP4G:zLdabo5eG4Weg+sFHDKEbejPi4G
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
GoLang User-Agent 1 IoCs
Uses default user-agent string defined by GoLang HTTP packages.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-14_cd70cca7a4b52d43fea6f431ca70bb46_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-14_cd70cca7a4b52d43fea6f431ca70bb46_poet-rat_snatch.exe"1⤵