Overview

overview

8

Static

static

8

2024-10-17...ch.exe

windows7-x64

2024-10-17...ch.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-10-17_805c79798e01d56ed437b0ff32a224b1_poet-rat_sliver_snatch

  • Size

    15.1MB

  • MD5

    805c79798e01d56ed437b0ff32a224b1

  • SHA1

    522ea5262e731710b478b0cabb5f3e4e500f1b8a

  • SHA256

    272a47d0329914147f3e9ef52c2cdb27eec25a9a0a6987ccd9df9cebeef1c282

  • SHA512

    15e2e0a0712f7dd76f60765934f598e3f79fc44f98d5b1b688967580bf64b6ee1c3e88259b7991c483a970f000444188f5788e0d02aa1f71e8d129886af148f7

  • SSDEEP

    98304:p83enceo44mHeza2/uWGBI3NxQECKq4MQDRoTSZKZcpWbkc7bJhuAhu0+3VHrJ:1ceo44mHl2/VpCKlDRoMKJkcKJJFN

Score
8/10

Malware Config

Signatures

  • Detects GOST tunneling tool 1 IoCs

    A simple tunneling tool written in Golang

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-17_805c79798e01d56ed437b0ff32a224b1_poet-rat_sliver_snatch
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections