Overview

overview

8

Static

static

8

2024-10-17...ch.exe

windows7-x64

2024-10-17...ch.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-10-17_e7ff0e39bbdeecc808995f463a685858_poet-rat_sliver_snatch

  • Size

    15.1MB

  • MD5

    e7ff0e39bbdeecc808995f463a685858

  • SHA1

    f1ff77c64046281a7948f9dd77f3233417d1aeeb

  • SHA256

    63cef6aa223fe157c2fa81f72037aeb09f23a7cc038b69303141c0a332db5443

  • SHA512

    d68eb824c6bfb7a173a075e9b7923ad6b999ffa47cf12f3de7000ff8b09a0ebad5ac5302220f3e837fdd9a0f4aed336e0ce88e8fb2cf1598046aafab452196d0

  • SSDEEP

    98304:p83enceo44mHeza2/uWGBI3NxQECKq4MQDRoTSZKZcpWbkc7bJhuAhu0+3VHra:1ceo44mHl2/VpCKlDRoMKJkcKJJFW

Score
8/10

Malware Config

Signatures

  • Detects GOST tunneling tool 1 IoCs

    A simple tunneling tool written in Golang

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-17_e7ff0e39bbdeecc808995f463a685858_poet-rat_sliver_snatch
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections