General
- Target 2024-10-07_373eb47a07dceb67a31a25407d943cf3_poet-rat_sliver_snatch
- Size 18.6MB
- Sample241007-mz4xea1flm
- SHA256 303d0b7ddbb66de9628edb74cf366c75a5a3bfa19b3cc0829c1651cebb195a74
- MD5 373eb47a07dceb67a31a25407d943cf3
- SHA1 c947f33e8663938049847378eda362cc2057fa60
- SHA512 3fc257b14511b7854cbfa61f9ecdcfed6f58d48fb4a1c26b3be00ca81abc1607f20b4d85c38bcd3c4cca007455537feeab05cb728b19606868af515deede395b
- SSDEEP 196608:U3wFvVD54spjYK3KeSoTZXTTHmLr4Mr82IeZzRs:N5fp8K3/SYTHvEs
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
2024-10-07_373eb47a07dceb67a31a25407d943cf3_poet-rat_sliver_snatch.exe
Resource
win7-20240903-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-10-07_373eb47a07dceb67a31a25407d943cf3_poet-rat_sliver_snatch.exe
Resource
win10v2004-20241007-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-10-07_373eb47a07dceb67a31a25407d943cf3_poet-rat_sliver_snatch
- Size 18.6MB
- SHA256 303d0b7ddbb66de9628edb74cf366c75a5a3bfa19b3cc0829c1651cebb195a74
- MD5 373eb47a07dceb67a31a25407d943cf3
- SHA1 c947f33e8663938049847378eda362cc2057fa60
- SHA512 3fc257b14511b7854cbfa61f9ecdcfed6f58d48fb4a1c26b3be00ca81abc1607f20b4d85c38bcd3c4cca007455537feeab05cb728b19606868af515deede395b
- SSDEEP 196608:U3wFvVD54spjYK3KeSoTZXTTHmLr4Mr82IeZzRs:N5fp8K3/SYTHvEs
- MD5 SHA1 SHA512 SSDEEP
Score7/10Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.