Resubmissions

30/09/2024, 15:02

240930-sej96a1fnl 10

19/08/2024, 02:23

240819-cvgafasflp 10

General

  • Target

    2024-08-19_3f15c408ef29467ff9977e3caf56fb9c_poet-rat_snatch

  • Size

    7.2MB

  • MD5

    3f15c408ef29467ff9977e3caf56fb9c

  • SHA1

    2459ac3b9ecd61c65327afb4802dc9b430277d89

  • SHA256

    f4b1dc09a4e79ac4590a051867e2452bf3899932a38423833cb85619d039e577

  • SHA512

    dc28eb8b76d2ad135d667533c1d637d873a46cf41ed64baa655e04b125f61fbb990a1895e2badba3baeda6f432c3b3c37beb986a6a67267efb192f9d055e6607

  • SSDEEP

    98304:7++5a1E0DzFlyGNa6cE1pTH4nng1xxks+eos:7++S1lyG91y4lro

Malware Config

Signatures

  • Thunderkittyransomware family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-19_3f15c408ef29467ff9977e3caf56fb9c_poet-rat_snatch
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections