Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-12-03_af679b4559fe2a8f182bbd5f9d2e7bec_frostygoop_hijackloader_luca-stealer_poet-rat_snatch
-
Size
5.1MB
-
Sample
241203-y5m2maxqdl
-
MD5
af679b4559fe2a8f182bbd5f9d2e7bec
-
SHA1
193fedccd15541563f21f1638cd0cf5dfd3f23db
-
SHA256
e3cb48e5a91062c073844676d319598ced84650b3f8a0df01da752b6a585094f
-
SHA512
f8d17c54e9e25fb046ae74d92c1747d8b357de21620e09cf1246e5d714089de19e35c1f2826f2f2aef9da2f2fd05ae5a9061b9067445923ee4bb468414ea671e
-
SSDEEP
49152:9y9HGov4ftacY9lbcByt5rJscl4F51CWJAs5EeG7GIV/7LyBThv3ILW01am:0vfe7P5ENGIVPoThv3Iam
Behavioral task
behavioral1
Sample
2024-12-03_af679b4559fe2a8f182bbd5f9d2e7bec_frostygoop_hijackloader_luca-stealer_poet-rat_snatch.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-12-03_af679b4559fe2a8f182bbd5f9d2e7bec_frostygoop_hijackloader_luca-stealer_poet-rat_snatch.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2024-12-03_af679b4559fe2a8f182bbd5f9d2e7bec_frostygoop_hijackloader_luca-stealer_poet-rat_snatch
-
Size
5.1MB
-
MD5
af679b4559fe2a8f182bbd5f9d2e7bec
-
SHA1
193fedccd15541563f21f1638cd0cf5dfd3f23db
-
SHA256
e3cb48e5a91062c073844676d319598ced84650b3f8a0df01da752b6a585094f
-
SHA512
f8d17c54e9e25fb046ae74d92c1747d8b357de21620e09cf1246e5d714089de19e35c1f2826f2f2aef9da2f2fd05ae5a9061b9067445923ee4bb468414ea671e
-
SSDEEP
49152:9y9HGov4ftacY9lbcByt5rJscl4F51CWJAs5EeG7GIV/7LyBThv3ILW01am:0vfe7P5ENGIVPoThv3Iam
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1