Analysis
-
max time kernel
93s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-11-2024 12:42
General
-
Target
2024-11-21_398e02eccce7ebae5a7abbecfdf6b602_frostygoop_hijackloader_poet-rat_snatch_zxxz.exe
-
Size
17.8MB
-
MD5
398e02eccce7ebae5a7abbecfdf6b602
-
SHA1
c9ed1dff7e97d3a56564d215ff498bf8ecf023b6
-
SHA256
027907f23034a95f57ad90d522766f06fb9631e9dcc532e50902f3676c29b534
-
SHA512
dbf4035abf2f406180975908a47c32b84345dd7cf73e418109ca43fe55dcecfcb7cdcc0908cd1be0bf827cb4eb60dce551a83b2742fadcc2326bca89dd08c704
-
SSDEEP
98304:9MWhYnBg1t4oUyi2D5jyW/bxkHWvlS0mTK8/WNMtz9f/BILO9qT798Oit/bkR9v0:2WGl814NjONUWeiHit/bcVsuBg07pbA
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-21_398e02eccce7ebae5a7abbecfdf6b602_frostygoop_hijackloader_poet-rat_snatch_zxxz.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-21_398e02eccce7ebae5a7abbecfdf6b602_frostygoop_hijackloader_poet-rat_snatch_zxxz.exe"1⤵
- System Location Discovery: System Language Discovery