a1d4f708370bb5cd939339d45a06825eb369c1064a8d02ec6bbe87ddd0157ef7

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06-10-2024 00:56

Target

2024-10-06_760e7baaa9e758c9b2e9201dc13f34f3_poet-rat_sliver_snatch.exe
Size

12.7MB
MD5

760e7baaa9e758c9b2e9201dc13f34f3
SHA1

f3e88e83b9b6b14a6a145fe82d2d0565f0a8e511
SHA256

a1d4f708370bb5cd939339d45a06825eb369c1064a8d02ec6bbe87ddd0157ef7
SHA512

5cb32f11ba900ccccc7b7490ee09928589e96a5758984cc2f4fa7f028c9594fcccb78e8e3518338df5847c650d63d7e26e34784858ed89d240c862876c96f4c6
SSDEEP

98304:swLhpq8ezAoVotBavnS9JfkJXieyaWJyn+nEdYZ0MhhFwxm/tYt:j1TeDVotBaPPXieJn+Ed6Sxm/tYt

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

2024-10-06_760e7baaa9e758c9b2e9201dc13f34f3_poet-rat_sliver_snatch.exe

pid	Process
3688	2024-10-06_760e7baaa9e758c9b2e9201dc13f34f3_poet-rat_sliver_snatch.exe
3688	2024-10-06_760e7baaa9e758c9b2e9201dc13f34f3_poet-rat_sliver_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2024-10-06_760e7baaa9e758c9b2e9201dc13f34f3_poet-rat_sliver_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2024-10-06_760e7baaa9e758c9b2e9201dc13f34f3_poet-rat_sliver_snatch.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3688