Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
10-11-2024 01:36
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-10_b1d14d6541b081876c4301659862bddd_frostygoop_poet-rat_snatch.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
2024-11-10_b1d14d6541b081876c4301659862bddd_frostygoop_poet-rat_snatch.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-11-10_b1d14d6541b081876c4301659862bddd_frostygoop_poet-rat_snatch.exe
-
Size
3.8MB
-
MD5
b1d14d6541b081876c4301659862bddd
-
SHA1
198fb9819a989493b8c5e44a68c8ae650071b1a5
-
SHA256
7a3fefd0b7cf4328d529d69a8b50d7c14a7f76c6ac4a1bfb12b144efd995b17a
-
SHA512
6202b2c02b41a00daa178650ba99388d378f830a7860d5b3e115232dd41cf19f77117b97454a2f5f8039e312bdf5cebb156f62f0a6594a78af4d2c921e036afb
-
SSDEEP
49152:GuMrSAPPmpx03BnvBdNA2nhT5cCAFvNLszbOwoTIPbAwuHJPVksaMhiwDavV6Lqb:GuMrHPPK0RnJdUszZDAWsLhiwOvV3X
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
2024-11-10_b1d14d6541b081876c4301659862bddd_frostygoop_poet-rat_snatch.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-11-10_b1d14d6541b081876c4301659862bddd_frostygoop_poet-rat_snatch.exe