General
-
Target
2024-11-23_48ecdc7dd3e1f9e45c0c5655b64efc56_frostygoop_poet-rat_snatch
-
Size
20.9MB
-
Sample
241123-va5fmsxrev
-
MD5
48ecdc7dd3e1f9e45c0c5655b64efc56
-
SHA1
39c30d649b19a3037acc0aa565ac7a79c5964d43
-
SHA256
a80a15b0c3cf7758c055040626a63c5fb1e63ee1753f0797088c309f0d3d95be
-
SHA512
82b462083161dfb3e6d2928d0f7297fc2f5d2e8a1cd9b727863533d6af3cd6dc217985eb8e3cdc2af52249f34c646b00b4bbaaa7549713b5a9688603a2de9cb8
-
SSDEEP
98304:SUJCbgAXxTIVEgaNRU69S9yeLbcodCGQceo+Q9ZL57YkJTJv:g9ZGySIwCW2kZ9FJv
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-23_48ecdc7dd3e1f9e45c0c5655b64efc56_frostygoop_poet-rat_snatch.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://servicedny.site
https://authorisev.site
https://faulteyotk.site
https://dilemmadu.site
https://contemteny.site
https://goalyfeastz.site
https://opposezmny.site
https://seallysl.site
https://nhariutz.cyou
Targets
-
-
Target
2024-11-23_48ecdc7dd3e1f9e45c0c5655b64efc56_frostygoop_poet-rat_snatch
-
Size
20.9MB
-
MD5
48ecdc7dd3e1f9e45c0c5655b64efc56
-
SHA1
39c30d649b19a3037acc0aa565ac7a79c5964d43
-
SHA256
a80a15b0c3cf7758c055040626a63c5fb1e63ee1753f0797088c309f0d3d95be
-
SHA512
82b462083161dfb3e6d2928d0f7297fc2f5d2e8a1cd9b727863533d6af3cd6dc217985eb8e3cdc2af52249f34c646b00b4bbaaa7549713b5a9688603a2de9cb8
-
SSDEEP
98304:SUJCbgAXxTIVEgaNRU69S9yeLbcodCGQceo+Q9ZL57YkJTJv:g9ZGySIwCW2kZ9FJv
-
Lumma family
-
Suspicious use of SetThreadContext
-