General
-
Target
2025-01-11_562c45276e88ad01c0fe1465c7797f14_frostygoop_poet-rat_snatch
-
Size
13.4MB
-
Sample
250111-nvgrra1lhm
-
MD5
562c45276e88ad01c0fe1465c7797f14
-
SHA1
2b6d738addaa03b48844d871488d244e9fa0c87e
-
SHA256
1113d3961ac3de02d11d2c9d1b364104c4b3571540247564636619a16283bdcc
-
SHA512
de6cde4f32acd5d716b6f7305fa0d86a6bccf88bc1626edc3162a05b4e8fb0aef55abe1c84036ab52a65f9419cf7603eb67e2cbae75ed09ddd07c028360c589e
-
SSDEEP
98304:V0WtIDiu9RJgeQwqfoaq7szbjllr9W2jSPaXBlftIa44BCt:2WtnBwqNSPaXBlftIuBo
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-11_562c45276e88ad01c0fe1465c7797f14_frostygoop_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://cloudewahsj.shop/api
https://rabidcowse.shop/api
https://noisycuttej.shop/api
https://tirepublicerj.shop/api
https://framekgirus.shop/api
https://wholersorie.shop/api
https://abruptyopsn.shop/api
https://nearycrepso.shop/api
https://remakeveile.sbs/api
Targets
-
-
Target
2025-01-11_562c45276e88ad01c0fe1465c7797f14_frostygoop_poet-rat_snatch
-
Size
13.4MB
-
MD5
562c45276e88ad01c0fe1465c7797f14
-
SHA1
2b6d738addaa03b48844d871488d244e9fa0c87e
-
SHA256
1113d3961ac3de02d11d2c9d1b364104c4b3571540247564636619a16283bdcc
-
SHA512
de6cde4f32acd5d716b6f7305fa0d86a6bccf88bc1626edc3162a05b4e8fb0aef55abe1c84036ab52a65f9419cf7603eb67e2cbae75ed09ddd07c028360c589e
-
SSDEEP
98304:V0WtIDiu9RJgeQwqfoaq7szbjllr9W2jSPaXBlftIa44BCt:2WtnBwqNSPaXBlftIuBo
-
Lumma family
-
Suspicious use of SetThreadContext
-