Analysis

  • max time kernel
    92s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-09-2024 15:46

General

  • Target

    2024-09-30_1c3afb7867f715abbb04dacc04c40219_poet-rat_snatch.exe

  • Size

    18.1MB

  • MD5

    1c3afb7867f715abbb04dacc04c40219

  • SHA1

    9685a1a53d5ec060983af668ab9cf322cc3e4662

  • SHA256

    0c3715187df8a498f5791178e303437564e70c74ec09650722c6a57662093c33

  • SHA512

    813f47a132ee3965401a0548caf4390f6c292669d39e3c67cac97785044f158e6c0f9166285c3da710f34119aee1d1645c8c7d38dbb4bcc5c90af0f9ef0ddab3

  • SSDEEP

    98304:bNsBzrA5BpcPhqcTfrFdktt5QHLem6/N7vCjTEVFYiiqVAr6KSvj6O:yA1cPhqcMx7+AVFvX76O

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-09-30_1c3afb7867f715abbb04dacc04c40219_poet-rat_snatch.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-09-30_1c3afb7867f715abbb04dacc04c40219_poet-rat_snatch.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads