General
-
Target
2025-01-12_631f4845aaf0f5080955e0e5ff1fa848_frostygoop_poet-rat_snatch
-
Size
5.4MB
-
Sample
250112-bzy6dasjgj
-
MD5
631f4845aaf0f5080955e0e5ff1fa848
-
SHA1
c64e664b165a68fcd605df1c3d07f1697a6ce06f
-
SHA256
ab7044f01c332567029ab4065c812b980dc4d81cf7191fb9ec00d01dd0cab234
-
SHA512
185cc5e6ec85f523d1cfb535d955658580b88fe434671c212a26dd2f1e363e20937315fcad7763702ec9a702ed46c8fab12d97e37d61f104c3ffa2f533be2629
-
SSDEEP
49152:LArMgX9DQQrb++BsxgV3/Heloza6wYFANYw2Oa2cgNDZAY4g+WWC0x1a:LArMo1++OGVrzqZ1lWU
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-12_631f4845aaf0f5080955e0e5ff1fa848_frostygoop_poet-rat_snatch.exe
Resource
win7-20241023-en
Malware Config
Extracted
lumma
https://robinsharez.shop/api
https://handscreamny.shop/api
https://chipdonkeruz.shop/api
https://versersleep.shop/api
https://crowdwarek.shop/api
https://apporholis.shop/api
https://femalsabler.shop/api
https://soundtappysk.shop/api
https://bashusolici.sbs/api
Targets
-
-
Target
2025-01-12_631f4845aaf0f5080955e0e5ff1fa848_frostygoop_poet-rat_snatch
-
Size
5.4MB
-
MD5
631f4845aaf0f5080955e0e5ff1fa848
-
SHA1
c64e664b165a68fcd605df1c3d07f1697a6ce06f
-
SHA256
ab7044f01c332567029ab4065c812b980dc4d81cf7191fb9ec00d01dd0cab234
-
SHA512
185cc5e6ec85f523d1cfb535d955658580b88fe434671c212a26dd2f1e363e20937315fcad7763702ec9a702ed46c8fab12d97e37d61f104c3ffa2f533be2629
-
SSDEEP
49152:LArMgX9DQQrb++BsxgV3/Heloza6wYFANYw2Oa2cgNDZAY4g+WWC0x1a:LArMo1++OGVrzqZ1lWU
-
Lumma family
-
Suspicious use of SetThreadContext
-