General
-
Target
2025-01-11_340db55f34b850bbbc9fdb2f6cae0f61_frostygoop_poet-rat_snatch
-
Size
5.0MB
-
Sample
250111-mncc1szjcp
-
MD5
340db55f34b850bbbc9fdb2f6cae0f61
-
SHA1
6916202a66abc0bfb5134cea945adb55efcbf4d5
-
SHA256
a6bca59637080944459d3c4b30d18e1f2c90330ab9b17b1518a657b8b6248fac
-
SHA512
6fa78282d5978e1fafc48c46c5b2338c1c8eacb976bd310b36d295b4a9f2a3dd9197a99ba00d8b0eea928fb19e340fe57ff3a554916900e25cbedbdf971b500e
-
SSDEEP
49152:fqb5ndxT3zwUJM+4Bsc3Zm2PWBj+97uZEQnXiyXy6GDXVMJIyRs30rnsu+HlP/bN:fqb5D/zW+4LEjBDn86tIy4Svj
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-11_340db55f34b850bbbc9fdb2f6cae0f61_frostygoop_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://robinsharez.shop/api
https://handscreamny.shop/api
https://chipdonkeruz.shop/api
https://versersleep.shop/api
https://crowdwarek.shop/api
https://apporholis.shop/api
https://femalsabler.shop/api
https://soundtappysk.shop/api
Targets
-
-
Target
2025-01-11_340db55f34b850bbbc9fdb2f6cae0f61_frostygoop_poet-rat_snatch
-
Size
5.0MB
-
MD5
340db55f34b850bbbc9fdb2f6cae0f61
-
SHA1
6916202a66abc0bfb5134cea945adb55efcbf4d5
-
SHA256
a6bca59637080944459d3c4b30d18e1f2c90330ab9b17b1518a657b8b6248fac
-
SHA512
6fa78282d5978e1fafc48c46c5b2338c1c8eacb976bd310b36d295b4a9f2a3dd9197a99ba00d8b0eea928fb19e340fe57ff3a554916900e25cbedbdf971b500e
-
SSDEEP
49152:fqb5ndxT3zwUJM+4Bsc3Zm2PWBj+97uZEQnXiyXy6GDXVMJIyRs30rnsu+HlP/bN:fqb5D/zW+4LEjBDn86tIy4Svj
-
Lumma family
-
Suspicious use of SetThreadContext
-