Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
23-12-2024 15:47
General
-
Target
2024-12-23_a9c36eb66af0de33b933202367810e42_frostygoop_poet-rat_snatch.exe
-
Size
4.8MB
-
MD5
a9c36eb66af0de33b933202367810e42
-
SHA1
a0c54e88f0aec04ae462a8a727c206d7ee5b751c
-
SHA256
5d443ec3458418f9e383f058b78b77efe55175533698e84b3ef97f82e3e27a5b
-
SHA512
049ee7434eca256a51027abd26374e94be161cd9134a10e491f50a2eac576eb2640995a81b682c15d007931ebfa504429d870a593725aae35a02b6d3534ade03
-
SSDEEP
49152:cpfQgfL06Ien/QV/5EKKyVzpMSqSzXo8fsPx7vwoQXzm4SpE28InoVzGc+Xz8H99:kowZHn/SBzXtszQXC4B+I4
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-12-23_a9c36eb66af0de33b933202367810e42_frostygoop_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-12-23_a9c36eb66af0de33b933202367810e42_frostygoop_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery