Overview

overview

10

Static

static

10

2024-10-07...ch.exe

windows7-x64

7

2024-10-07...ch.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-07_373eb47a07dceb67a31a25407d943cf3_poet-rat_sliver_snatch

  • Size

    18.6MB

  • Sample

    241007-mz4xea1flm

  • MD5

    373eb47a07dceb67a31a25407d943cf3

  • SHA1

    c947f33e8663938049847378eda362cc2057fa60

  • SHA256

    303d0b7ddbb66de9628edb74cf366c75a5a3bfa19b3cc0829c1651cebb195a74

  • SHA512

    3fc257b14511b7854cbfa61f9ecdcfed6f58d48fb4a1c26b3be00ca81abc1607f20b4d85c38bcd3c4cca007455537feeab05cb728b19606868af515deede395b

  • SSDEEP

    196608:U3wFvVD54spjYK3KeSoTZXTTHmLr4Mr82IeZzRs:N5fp8K3/SYTHvEs

Score
10/10
sliverdiscovery

Malware Config

Targets

    • Target

      2024-10-07_373eb47a07dceb67a31a25407d943cf3_poet-rat_sliver_snatch

    • Size

      18.6MB

    • MD5

      373eb47a07dceb67a31a25407d943cf3

    • SHA1

      c947f33e8663938049847378eda362cc2057fa60

    • SHA256

      303d0b7ddbb66de9628edb74cf366c75a5a3bfa19b3cc0829c1651cebb195a74

    • SHA512

      3fc257b14511b7854cbfa61f9ecdcfed6f58d48fb4a1c26b3be00ca81abc1607f20b4d85c38bcd3c4cca007455537feeab05cb728b19606868af515deede395b

    • SSDEEP

      196608:U3wFvVD54spjYK3KeSoTZXTTHmLr4Mr82IeZzRs:N5fp8K3/SYTHvEs

    Score
    7/10
    discovery

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks