Behavioral task
behavioral1
Sample
2024-11-15_dc80f470ca6ec43f26d015ec7255498e_luca-stealer_ngrbot_poet-rat_snatch.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-15_dc80f470ca6ec43f26d015ec7255498e_luca-stealer_ngrbot_poet-rat_snatch.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-11-15_dc80f470ca6ec43f26d015ec7255498e_luca-stealer_ngrbot_poet-rat_snatch
-
Size
10.3MB
-
MD5
dc80f470ca6ec43f26d015ec7255498e
-
SHA1
9147c2c9c145846ae1365f8627a1447fde6d6918
-
SHA256
cfc40bde316dc71c690e7b358d362998e55df0540705f255ed2609a5e123119e
-
SHA512
aed7d02bef4d4c0c1bf0ba0028bc2e47a7078667902e9b6f351c49df2bede3031965571e3054d29fd5d2b6bba0e926dda2efc50f250ab1819e80e9ffedc86b1f
-
SSDEEP
98304:FI9ucyfd+hK/9Ujmx655HmcWvJLWkGaEiB2v/Zm+vD:a9u5+hKFlobmcWvFWkGH9LvD
Malware Config
Signatures
Files
-
2024-11-15_dc80f470ca6ec43f26d015ec7255498e_luca-stealer_ngrbot_poet-rat_snatch.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: 7.1MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE