General

  • Target

    2024-09-18_9ec12225f73bea0935b6161e441fb6ac_poet-rat_snatch

  • Size

    9.2MB

  • MD5

    9ec12225f73bea0935b6161e441fb6ac

  • SHA1

    d4959c06d797318964a6f8b93edcc5a0ee93da40

  • SHA256

    ec4292c998afb2cb885b1437e69322d5b78e43455321cd79d3a7bc9289815c63

  • SHA512

    6140eafce60fc6f92c6ea8d69d8c3165a195a8b7d66e0ff03edd7a87931b69e0b751e12692cda06c9886895d76b382a3a9a124f3f491d07459c02c29f017fba1

  • SSDEEP

    98304:jAepitsWVwUQtDxLq+na0lj/XxMLvhhZytTVhg5iqPzN:jAGitpzIxMLphwVhGzN

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/single_exec

Signatures

  • Glupteba family
  • Glupteba payload 1 IoCs
  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-18_9ec12225f73bea0935b6161e441fb6ac_poet-rat_snatch
    .exe windows:6 windows x86 arch:x86

    1cd364a9e949d5ecebd6c614e64bc545


    Headers

    Imports

    Sections