Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
14-09-2024 09:49
General
-
Target
2024-09-14_e6a3479e6cb21d59711d750ab29d3569_hijackloader_poet-rat_snatch_zxxz.exe
-
Size
17.8MB
-
MD5
e6a3479e6cb21d59711d750ab29d3569
-
SHA1
fab5bec8ef041ac8636c4305c11b9a4e0fba50e9
-
SHA256
94ea27de171dc17b39c1917d7d4b31c6001e0050839e2bd2a536c4942cc61aba
-
SHA512
e5d23b69673c742c28776cddf93ad10ac5bf2fc3c3220539187a0d363d05602938ba10aa558a95c33f167dd5665b164cdf8a3648bf94e811a4aea8012256189f
-
SSDEEP
98304:JMWhYnBg1t4oUyi2D5jyW/bxkHWvlS0mTK8/WNMtz9f/BILO9qT798Oit/bkR9vr:KWGl814NjONUWeiHit/bcVsuBg07pbAI
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-14_e6a3479e6cb21d59711d750ab29d3569_hijackloader_poet-rat_snatch_zxxz.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-14_e6a3479e6cb21d59711d750ab29d3569_hijackloader_poet-rat_snatch_zxxz.exe"1⤵
- System Location Discovery: System Language Discovery