General
-
Target
2025-01-12_69414292b01e283be9ac0d70467dd0fd_frostygoop_poet-rat_snatch
-
Size
8.3MB
-
Sample
250112-2c59aaslgz
-
MD5
69414292b01e283be9ac0d70467dd0fd
-
SHA1
f59c79d18c51a4c9ba66416a2ee5e11d36c09096
-
SHA256
ca0cc1b3d32ba24cb7a8689f8ccabf8e3afcf709e4ed3ac6d87a89b7a28376ef
-
SHA512
45998236b0cab153636d8f105afbe89e1760a6b496add10a97053b5f7d42ccad3ef69c46c4ea675e452db509ffa6c3bc71dc93aa1a42ee9987026ae0de1473e6
-
SSDEEP
98304:LZr2lIQGhEsCfoFyBlSeemt+TyViqoLb9ZzSUNzf+MhxEr71c:t62QQyBlSOwTyMpe
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-12_69414292b01e283be9ac0d70467dd0fd_frostygoop_poet-rat_snatch.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://owerinternal.sbs/api
Targets
-
-
Target
2025-01-12_69414292b01e283be9ac0d70467dd0fd_frostygoop_poet-rat_snatch
-
Size
8.3MB
-
MD5
69414292b01e283be9ac0d70467dd0fd
-
SHA1
f59c79d18c51a4c9ba66416a2ee5e11d36c09096
-
SHA256
ca0cc1b3d32ba24cb7a8689f8ccabf8e3afcf709e4ed3ac6d87a89b7a28376ef
-
SHA512
45998236b0cab153636d8f105afbe89e1760a6b496add10a97053b5f7d42ccad3ef69c46c4ea675e452db509ffa6c3bc71dc93aa1a42ee9987026ae0de1473e6
-
SSDEEP
98304:LZr2lIQGhEsCfoFyBlSeemt+TyViqoLb9ZzSUNzf+MhxEr71c:t62QQyBlSOwTyMpe
-
Lumma family
-
Suspicious use of SetThreadContext
-