Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-05_6b216faa79e69015e9663fb9c544a841_poet-rat_snatch
-
Size
16.6MB
-
Sample
241005-rwg1paveln
-
MD5
6b216faa79e69015e9663fb9c544a841
-
SHA1
94e38897713d97d0affac8f2d0888f3d93f60edc
-
SHA256
844915ce35ba238257b1ea5dc13b5abacd5af89b7ac4d325cca8762a4c728db3
-
SHA512
66c240aefcf7888229be178cdb0406595388a044e8d18ccec66413a90563be79793e1e13737c3dc890c8de5dd898339e4bf5d4f4e596e1c0537aa60e178f8fe8
-
SSDEEP
98304:GEaIgmIiEobXiJKRsbVXwp9Dt2WDDfy5VAZN+83bzkWEbg3:2MEKubVXwpLLfy5VCN+
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-05_6b216faa79e69015e9663fb9c544a841_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
Extracted
lumma
https://frannykamj.store/api
Targets
-
-
Target
2024-10-05_6b216faa79e69015e9663fb9c544a841_poet-rat_snatch
-
Size
16.6MB
-
MD5
6b216faa79e69015e9663fb9c544a841
-
SHA1
94e38897713d97d0affac8f2d0888f3d93f60edc
-
SHA256
844915ce35ba238257b1ea5dc13b5abacd5af89b7ac4d325cca8762a4c728db3
-
SHA512
66c240aefcf7888229be178cdb0406595388a044e8d18ccec66413a90563be79793e1e13737c3dc890c8de5dd898339e4bf5d4f4e596e1c0537aa60e178f8fe8
-
SSDEEP
98304:GEaIgmIiEobXiJKRsbVXwp9Dt2WDDfy5VAZN+83bzkWEbg3:2MEKubVXwpLLfy5VCN+
-
Suspicious use of SetThreadContext
-