Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-12_ddcba1f78922e417004a19d6cee9c455_poet-rat_snatch
-
Size
3.9MB
-
Sample
241013-adhqtstajj
-
MD5
ddcba1f78922e417004a19d6cee9c455
-
SHA1
cca66ceb1183f92143fa220790f7cccffe738578
-
SHA256
591df8534fccbc9386d61316a2271a46edcad0348dec1f9bbae1cac981d5dc52
-
SHA512
0effec49f298da4f9b5035c2be0eb1bbedb5d6e83c5b648648952c1f6a636574ec65f6e446aad083e94ab4bdfd6f38006995f03788d310784e44ebee5d87dd1c
-
SSDEEP
49152:gpgAaPc5+0ESTmalvEnO/2S2rf6JRvjiS6WcpNnbxn6WtB:Egw5+0ESzlqVrsRuS6Zpzv
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-12_ddcba1f78922e417004a19d6cee9c455_poet-rat_snatch.exe
Resource
win7-20240729-en
Malware Config
Extracted
lumma
https://drawwyobstacw.sbs
https://condifendteu.sbs
https://ehticsprocw.sbs
https://vennurviot.sbs
https://resinedyw.sbs
https://enlargkiw.sbs
https://allocatinow.sbs
https://mathcucom.sbs
Targets
-
-
Target
2024-10-12_ddcba1f78922e417004a19d6cee9c455_poet-rat_snatch
-
Size
3.9MB
-
MD5
ddcba1f78922e417004a19d6cee9c455
-
SHA1
cca66ceb1183f92143fa220790f7cccffe738578
-
SHA256
591df8534fccbc9386d61316a2271a46edcad0348dec1f9bbae1cac981d5dc52
-
SHA512
0effec49f298da4f9b5035c2be0eb1bbedb5d6e83c5b648648952c1f6a636574ec65f6e446aad083e94ab4bdfd6f38006995f03788d310784e44ebee5d87dd1c
-
SSDEEP
49152:gpgAaPc5+0ESTmalvEnO/2S2rf6JRvjiS6WcpNnbxn6WtB:Egw5+0ESzlqVrsRuS6Zpzv
-
Suspicious use of SetThreadContext
-