General
-
Target
2024-11-24_e86224a012a5f1b729182f3ee7188313_frostygoop_poet-rat_snatch
-
Size
8.2MB
-
Sample
241124-jpfv2swrgk
-
MD5
e86224a012a5f1b729182f3ee7188313
-
SHA1
815241dd131930091cae154a21cb842d290f677f
-
SHA256
79d2beb666f27be59e7aadae2c2acb139221689d734f556779c91e0f3a4629e1
-
SHA512
26d6add3a1fc250eeab77ecf3d8d2e02cd3a873ecbb3dd8465e1a2e6ed89b8f25f55cee347b178678651df71083c5132cabc97c2ac11cf469765a8d4a40e1e6a
-
SSDEEP
98304:9fdMMWNTwsBRL+oNyAJHBcjrNH+mCmDs9JFJ:IQsNHedhsr
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-24_e86224a012a5f1b729182f3ee7188313_frostygoop_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://scriptyprefej.store
https://navygenerayk.store
https://founpiuer.store
https://necklacedmny.store
https://thumbystriw.store
https://fadehairucw.store
https://crisiwarny.store
https://presticitpo.store
Targets
-
-
Target
2024-11-24_e86224a012a5f1b729182f3ee7188313_frostygoop_poet-rat_snatch
-
Size
8.2MB
-
MD5
e86224a012a5f1b729182f3ee7188313
-
SHA1
815241dd131930091cae154a21cb842d290f677f
-
SHA256
79d2beb666f27be59e7aadae2c2acb139221689d734f556779c91e0f3a4629e1
-
SHA512
26d6add3a1fc250eeab77ecf3d8d2e02cd3a873ecbb3dd8465e1a2e6ed89b8f25f55cee347b178678651df71083c5132cabc97c2ac11cf469765a8d4a40e1e6a
-
SSDEEP
98304:9fdMMWNTwsBRL+oNyAJHBcjrNH+mCmDs9JFJ:IQsNHedhsr
-
Lumma family
-
Suspicious use of SetThreadContext
-