laplas | 4988ca050932812f03dbb22514cc1297b9adf93154da1f2921733c41aed527d3 | Triage

Sharing

General

Target

2024-12-17_80013dbfa1b6bdb8a3c1f63c3aa87c73_frostygoop_poet-rat_sliver_snatch
Size

633.5MB
Sample

241217-b9p1fswqbz
MD5

80013dbfa1b6bdb8a3c1f63c3aa87c73
SHA1

7d169cdd59a89d19dba3a83281c36f71bdcd6742
SHA256

4988ca050932812f03dbb22514cc1297b9adf93154da1f2921733c41aed527d3
SHA512

9f3d45be34804e8f9638e9b861a26ff0329ef839c2d5d22d6932d48b3c79b32acc0cb7901372211123d3bcf87fe656ecd958b4b51c0ae1f0d4dca445386cfba4
SSDEEP

12582912:zONJ9mIVf1HbFZOWJcsvSJYlUjUHQzsBfskM3oG8KMlb/gf1f+6j6nksCJMj:AJ9mIXTusvSAPHheY9lzY1fHekh2

Score

10^/10

laplas discovery

Malware Config

Targets

- Target
  
  2024-12-17_80013dbfa1b6bdb8a3c1f63c3aa87c73_frostygoop_poet-rat_sliver_snatch
- Size
  
  633.5MB
- MD5
  
  80013dbfa1b6bdb8a3c1f63c3aa87c73
- SHA1
  
  7d169cdd59a89d19dba3a83281c36f71bdcd6742
- SHA256
  
  4988ca050932812f03dbb22514cc1297b9adf93154da1f2921733c41aed527d3
- SHA512
  
  9f3d45be34804e8f9638e9b861a26ff0329ef839c2d5d22d6932d48b3c79b32acc0cb7901372211123d3bcf87fe656ecd958b4b51c0ae1f0d4dca445386cfba4
- SSDEEP
  
  12582912:zONJ9mIVf1HbFZOWJcsvSJYlUjUHQzsBfskM3oG8KMlb/gf1f+6j6nksCJMj:AJ9mIXTusvSAPHheY9lzY1fHekh2
Score

7^/10

discovery
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2