Analysis
-
max time kernel
133s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
18-10-2024 10:55
General
-
Target
2024-10-18_6675372bd253069b918ad4e257cf8bea_poet-rat_sliver_snatch.exe
-
Size
15.5MB
-
MD5
6675372bd253069b918ad4e257cf8bea
-
SHA1
0162b93339d69d8347022121908e486ea1c223a8
-
SHA256
40bb7e675c9dbe0523676a299187935fee0f3791339ecb712eaf0dda1701ed30
-
SHA512
78d2849f685f6246bfa0f1ec2a559cbf26bd18349c5fd54439fb81dbbbc05016b6723babb6ed67c2b69ccd5ba90ae7b8d39ed84df94819a6e02349b18bc90a7f
-
SSDEEP
98304:hdUgS+Fnz6g2+T3QmGaBA6hdjEjvv2nCV4Jqlh9Tyar85+5hQR3gA6tbbohGctlL:h+g55f2J0hQ2nCcqd9hQ/5dB5
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-10-18_6675372bd253069b918ad4e257cf8bea_poet-rat_sliver_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-10-18_6675372bd253069b918ad4e257cf8bea_poet-rat_sliver_snatch.exe"1⤵
- System Location Discovery: System Language Discovery