General
-
Target
2024-10-15_4e3fa1ef9d814ce28fd73cce7831c3c7_poet-rat_snatch_zxxz
-
Size
21.1MB
-
Sample
241015-cf1qjasdpk
-
MD5
4e3fa1ef9d814ce28fd73cce7831c3c7
-
SHA1
d9fb284118f75853009cbb11b71eb7b378a2d261
-
SHA256
2b72831ca5142b0e754a0ad04f695921d17d8b71eee74e26d19b7d3350cfdbbd
-
SHA512
fd2f77ea6ce55d9d3e0041c0676efdb7c4d4eb9d5333e9750ada22ca765afefa5bb8009778aebaeabec66e0447bb80c0756832928014a2c88ab0c085ebc44a5d
-
SSDEEP
196608:o0V7c0EpS1lY3IiNzzzczmxW3YcynAuk:7weDiVzb2Ycyi
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-15_4e3fa1ef9d814ce28fd73cce7831c3c7_poet-rat_snatch_zxxz.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://drawwyobstacw.sbs
https://condifendteu.sbs
https://ehticsprocw.sbs
https://vennurviot.sbs
https://resinedyw.sbs
https://enlargkiw.sbs
https://allocatinow.sbs
https://mathcucom.sbs
https://proclaimykn.buzz
Targets
-
-
Target
2024-10-15_4e3fa1ef9d814ce28fd73cce7831c3c7_poet-rat_snatch_zxxz
-
Size
21.1MB
-
MD5
4e3fa1ef9d814ce28fd73cce7831c3c7
-
SHA1
d9fb284118f75853009cbb11b71eb7b378a2d261
-
SHA256
2b72831ca5142b0e754a0ad04f695921d17d8b71eee74e26d19b7d3350cfdbbd
-
SHA512
fd2f77ea6ce55d9d3e0041c0676efdb7c4d4eb9d5333e9750ada22ca765afefa5bb8009778aebaeabec66e0447bb80c0756832928014a2c88ab0c085ebc44a5d
-
SSDEEP
196608:o0V7c0EpS1lY3IiNzzzczmxW3YcynAuk:7weDiVzb2Ycyi
-
Suspicious use of SetThreadContext
-