Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-19_755a33949df13ef2bbe5b9d97deb3765_poet-rat_snatch
-
Size
22.5MB
-
Sample
240919-njxc3awfqk
-
MD5
755a33949df13ef2bbe5b9d97deb3765
-
SHA1
4c8682f7161f8d4a2cd66c70a3f9bfae9a957746
-
SHA256
845cfcc1672432e89d4f5f7ace57e8f48e5bae9cb1c0bb383c265fc04517ccc0
-
SHA512
2c8a0a73381395be04c01329cbbaf1b3331efa01e538e3c23f2a311d81b9f78690e64e8f3ad8d8510f0428de19caebfdfefc0f959d2d0aecef10e28309cf3056
-
SSDEEP
196608:HmRN/HYHTeQYt2utpIAU/7QrGCDsfMvveI:HYKQZT+Z
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-19_755a33949df13ef2bbe5b9d97deb3765_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://understagkedow.shop/api
https://genedjestytw.shop/api
Targets
-
-
Target
2024-09-19_755a33949df13ef2bbe5b9d97deb3765_poet-rat_snatch
-
Size
22.5MB
-
MD5
755a33949df13ef2bbe5b9d97deb3765
-
SHA1
4c8682f7161f8d4a2cd66c70a3f9bfae9a957746
-
SHA256
845cfcc1672432e89d4f5f7ace57e8f48e5bae9cb1c0bb383c265fc04517ccc0
-
SHA512
2c8a0a73381395be04c01329cbbaf1b3331efa01e538e3c23f2a311d81b9f78690e64e8f3ad8d8510f0428de19caebfdfefc0f959d2d0aecef10e28309cf3056
-
SSDEEP
196608:HmRN/HYHTeQYt2utpIAU/7QrGCDsfMvveI:HYKQZT+Z
-
Suspicious use of SetThreadContext
-