Analysis
-
max time kernel
92s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
30-09-2024 15:46
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-30_1c3afb7867f715abbb04dacc04c40219_poet-rat_snatch.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-09-30_1c3afb7867f715abbb04dacc04c40219_poet-rat_snatch.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-30_1c3afb7867f715abbb04dacc04c40219_poet-rat_snatch.exe
-
Size
18.1MB
-
MD5
1c3afb7867f715abbb04dacc04c40219
-
SHA1
9685a1a53d5ec060983af668ab9cf322cc3e4662
-
SHA256
0c3715187df8a498f5791178e303437564e70c74ec09650722c6a57662093c33
-
SHA512
813f47a132ee3965401a0548caf4390f6c292669d39e3c67cac97785044f158e6c0f9166285c3da710f34119aee1d1645c8c7d38dbb4bcc5c90af0f9ef0ddab3
-
SSDEEP
98304:bNsBzrA5BpcPhqcTfrFdktt5QHLem6/N7vCjTEVFYiiqVAr6KSvj6O:yA1cPhqcMx7+AVFvX76O
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 1948 2024-09-30_1c3afb7867f715abbb04dacc04c40219_poet-rat_snatch.exe 1948 2024-09-30_1c3afb7867f715abbb04dacc04c40219_poet-rat_snatch.exe 1948 2024-09-30_1c3afb7867f715abbb04dacc04c40219_poet-rat_snatch.exe 1948 2024-09-30_1c3afb7867f715abbb04dacc04c40219_poet-rat_snatch.exe