General
-
Target
2025-01-07_a01a7ada1d3653d3d63659931bb92845_frostygoop_poet-rat_snatch
-
Size
5.3MB
-
Sample
250107-2afkva1pbx
-
MD5
a01a7ada1d3653d3d63659931bb92845
-
SHA1
a2050e2f1aa5c42bd6928876d9bd3242cd58749d
-
SHA256
f156d221d319e2458b6417319ee63dda1e9394b9e800c3c095b61e9e06627e80
-
SHA512
558166791df81ea58f4e612974f42d8240956bcf58d317a07aafa647138fbbddfbbe9af6d2adf55feab606b4d1763de5963b0215f0639f4bd3dc3d2147ea46af
-
SSDEEP
49152:yPq3+sgmBTLJMzXnTw+SjPK1oJiprCycueYawwgeey7qzPRxscO6U6jn5sJW2Mes:y+35YzXTwZS1oAIueHwpy72AHJ3zm
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-07_a01a7ada1d3653d3d63659931bb92845_frostygoop_poet-rat_snatch.exe
Resource
win7-20240729-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
2025-01-07_a01a7ada1d3653d3d63659931bb92845_frostygoop_poet-rat_snatch
-
Size
5.3MB
-
MD5
a01a7ada1d3653d3d63659931bb92845
-
SHA1
a2050e2f1aa5c42bd6928876d9bd3242cd58749d
-
SHA256
f156d221d319e2458b6417319ee63dda1e9394b9e800c3c095b61e9e06627e80
-
SHA512
558166791df81ea58f4e612974f42d8240956bcf58d317a07aafa647138fbbddfbbe9af6d2adf55feab606b4d1763de5963b0215f0639f4bd3dc3d2147ea46af
-
SSDEEP
49152:yPq3+sgmBTLJMzXnTw+SjPK1oJiprCycueYawwgeey7qzPRxscO6U6jn5sJW2Mes:y+35YzXTwZS1oAIueHwpy72AHJ3zm
-
Lumma family
-
Suspicious use of SetThreadContext
-