General
-
Target
2024-11-19_91557b88ab1c9822a7385a3a73d0728e_frostygoop_poet-rat_snatch
-
Size
19.1MB
-
Sample
241119-qtzx2s1nhl
-
MD5
91557b88ab1c9822a7385a3a73d0728e
-
SHA1
4e172dec0180b77d28c64282dbfbc2e61c4125a8
-
SHA256
32b9b6380042b4d1d690c352cd973eedf3d916b38e2d29245508a6fed834ba5d
-
SHA512
78e7ace5ae877f60c16c6f8d01d8649ddb1d1090ce71880c6b61f65aed9d933b01287e468fba838feba9c1f9bda140ca4fca6c1b6a4ccd4b4013f098a2f29cdf
-
SSDEEP
98304:VXZV2lM1tyUNHO2lOgbnDBvTp/ZLiS2gEYsz/1oYfG+5qZufnbQOE133:HV2pUVVjLiS23oYhnbHg
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-19_91557b88ab1c9822a7385a3a73d0728e_frostygoop_poet-rat_snatch.exe
Resource
win7-20241023-en
Malware Config
Extracted
lumma
https://servicedny.site
https://authorisev.site
https://faulteyotk.site
https://dilemmadu.site
https://contemteny.site
https://goalyfeastz.site
https://opposezmny.site
https://seallysl.site
https://pastelyki.cyou
Targets
-
-
Target
2024-11-19_91557b88ab1c9822a7385a3a73d0728e_frostygoop_poet-rat_snatch
-
Size
19.1MB
-
MD5
91557b88ab1c9822a7385a3a73d0728e
-
SHA1
4e172dec0180b77d28c64282dbfbc2e61c4125a8
-
SHA256
32b9b6380042b4d1d690c352cd973eedf3d916b38e2d29245508a6fed834ba5d
-
SHA512
78e7ace5ae877f60c16c6f8d01d8649ddb1d1090ce71880c6b61f65aed9d933b01287e468fba838feba9c1f9bda140ca4fca6c1b6a4ccd4b4013f098a2f29cdf
-
SSDEEP
98304:VXZV2lM1tyUNHO2lOgbnDBvTp/ZLiS2gEYsz/1oYfG+5qZufnbQOE133:HV2pUVVjLiS23oYhnbHg
-
Lumma family
-
Suspicious use of SetThreadContext
-