General
-
Target
2025-01-10_72ef0068687122ecc2afda6d961dcc68_frostygoop_poet-rat_snatch
-
Size
5.0MB
-
Sample
250110-y8frqaykfq
-
MD5
72ef0068687122ecc2afda6d961dcc68
-
SHA1
544d914e4efac7c1e8ad8db9d451842b92fe7da6
-
SHA256
205acfbdf0cd86826cd6e6231519399f7cf5982d4dfca3f5849f5026a29030b7
-
SHA512
7b95cdd2241400c466f993c7ed114fc0aef2065781bbe5d2dbef8eb08b61a0287361ada4eeb53e4d802ea48cdc0d9e54945a31569cf4e85067151840aaa7905c
-
SSDEEP
49152:xQNyS4IEfDRZE0CzuJ8frjP8fl0Tw9fEmXva24V4Mzesc2IWx1AFT3Wb:xKFyf95Cz1Djjw9bGEJ
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-10_72ef0068687122ecc2afda6d961dcc68_frostygoop_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
Targets
-
-
Target
2025-01-10_72ef0068687122ecc2afda6d961dcc68_frostygoop_poet-rat_snatch
-
Size
5.0MB
-
MD5
72ef0068687122ecc2afda6d961dcc68
-
SHA1
544d914e4efac7c1e8ad8db9d451842b92fe7da6
-
SHA256
205acfbdf0cd86826cd6e6231519399f7cf5982d4dfca3f5849f5026a29030b7
-
SHA512
7b95cdd2241400c466f993c7ed114fc0aef2065781bbe5d2dbef8eb08b61a0287361ada4eeb53e4d802ea48cdc0d9e54945a31569cf4e85067151840aaa7905c
-
SSDEEP
49152:xQNyS4IEfDRZE0CzuJ8frjP8fl0Tw9fEmXva24V4Mzesc2IWx1AFT3Wb:xKFyf95Cz1Djjw9bGEJ
-
Lumma family
-
Suspicious use of SetThreadContext
-