Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2024, 16:06
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-03_7059ec4592daf990a3749a98773dec25_poet-rat_snatch.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-03_7059ec4592daf990a3749a98773dec25_poet-rat_snatch.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-10-03_7059ec4592daf990a3749a98773dec25_poet-rat_snatch.exe
-
Size
15.8MB
-
MD5
7059ec4592daf990a3749a98773dec25
-
SHA1
94fbd3ab0e3e50dfa8392f53da3a24c03ba9d9da
-
SHA256
8c7722fa5587b21b347ce8e6a74051d6b8373c1c9f4f89b8aa3bdeda7a42b794
-
SHA512
301e777ae495a2b5c42ecbb2449b9e6a3519effebb801d0d8f5ec99f5d8d50fb3eb0769888afea3028bd61efcc8c502895eccb424362b7704899b98eabd4fe75
-
SSDEEP
98304:0lOZUG32AeEaM2VOBEYBY9qupY2c5XiET0aoDbMuftDP+4DHCRXN01K0pImKKA+k:0y334OEYBwhAADbMKtDYXWclEofP79
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 1792 2024-10-03_7059ec4592daf990a3749a98773dec25_poet-rat_snatch.exe 1792 2024-10-03_7059ec4592daf990a3749a98773dec25_poet-rat_snatch.exe 1792 2024-10-03_7059ec4592daf990a3749a98773dec25_poet-rat_snatch.exe 1792 2024-10-03_7059ec4592daf990a3749a98773dec25_poet-rat_snatch.exe