General
-
Target
2025-01-09_b874c330b2d5405ec75c422053198a88_frostygoop_poet-rat_snatch
-
Size
6.2MB
-
Sample
250109-xhdzrsxnby
-
MD5
b874c330b2d5405ec75c422053198a88
-
SHA1
5f37baac1e873bf97746e9683c9ad62c5682d236
-
SHA256
1fb402868f12534dc3b8831b5d0b2eef484756079a0b5bd65befed716b9fda69
-
SHA512
462f6aec8a3769371e7b1ee3a4700e22187ccb00533d7cc877ed5b9577219ccbec6570b9407446157533d71b32c973604c8ce7c0c3d39b7cf6c4a7cf339015e3
-
SSDEEP
49152:zSJ1vjmsdptxef2FajrvbpBJ1CKUzOColPrznlRSraPdLs+LXK25JZEwCJHoo9Ue:zSLaYXxtcrvTvUynPmwuHn9Uq+3R
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-09_b874c330b2d5405ec75c422053198a88_frostygoop_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://flockanxiius.sbs/api
Targets
-
-
Target
2025-01-09_b874c330b2d5405ec75c422053198a88_frostygoop_poet-rat_snatch
-
Size
6.2MB
-
MD5
b874c330b2d5405ec75c422053198a88
-
SHA1
5f37baac1e873bf97746e9683c9ad62c5682d236
-
SHA256
1fb402868f12534dc3b8831b5d0b2eef484756079a0b5bd65befed716b9fda69
-
SHA512
462f6aec8a3769371e7b1ee3a4700e22187ccb00533d7cc877ed5b9577219ccbec6570b9407446157533d71b32c973604c8ce7c0c3d39b7cf6c4a7cf339015e3
-
SSDEEP
49152:zSJ1vjmsdptxef2FajrvbpBJ1CKUzOColPrznlRSraPdLs+LXK25JZEwCJHoo9Ue:zSLaYXxtcrvTvUynPmwuHn9Uq+3R
-
Lumma family
-
Suspicious use of SetThreadContext
-