General
-
Target
2025-01-14_ec6b54735d7321a41bd0321f72223731_frostygoop_poet-rat_snatch
-
Size
21.5MB
-
Sample
250114-w9ejyaxpej
-
MD5
ec6b54735d7321a41bd0321f72223731
-
SHA1
aab814baf073ab69f47ff6afe74d24599da922a3
-
SHA256
53fc9bdd31c2af05ee8882d3becd1dcb6377221e8d43b7704abb68646e34ae45
-
SHA512
ff96772da28865f1900f8c09ec0f3555f8fe7774d3a276176ac8c5b23c855cdbe9812ef867f0e4fcb53693bdeed2a9fb410e4aaeae2cfb9a8434063732eb3916
-
SSDEEP
196608:QbDrsadAVWkG5ujxk/XM30zQKox6enSmae1rfM+IRYqXl:EZ/M30Qdn5aeB83
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-14_ec6b54735d7321a41bd0321f72223731_frostygoop_poet-rat_snatch.exe
Resource
win7-20240729-en
Malware Config
Extracted
lumma
https://necessaryattm.shop/api
Targets
-
-
Target
2025-01-14_ec6b54735d7321a41bd0321f72223731_frostygoop_poet-rat_snatch
-
Size
21.5MB
-
MD5
ec6b54735d7321a41bd0321f72223731
-
SHA1
aab814baf073ab69f47ff6afe74d24599da922a3
-
SHA256
53fc9bdd31c2af05ee8882d3becd1dcb6377221e8d43b7704abb68646e34ae45
-
SHA512
ff96772da28865f1900f8c09ec0f3555f8fe7774d3a276176ac8c5b23c855cdbe9812ef867f0e4fcb53693bdeed2a9fb410e4aaeae2cfb9a8434063732eb3916
-
SSDEEP
196608:QbDrsadAVWkG5ujxk/XM30zQKox6enSmae1rfM+IRYqXl:EZ/M30Qdn5aeB83
-
Lumma family
-
Suspicious use of SetThreadContext
-