General
-
Target
2025-01-16_60bb08876657fa77f5ff832c114f6464_frostygoop_poet-rat_snatch
-
Size
5.4MB
-
Sample
250116-b8g88awnhm
-
MD5
60bb08876657fa77f5ff832c114f6464
-
SHA1
2f8a1ee884425d7576e50a6a186bc44a9d22efba
-
SHA256
335f697c3be8cac622f3ebcd5107b0bad45ac1de22f7c06fffd334ebffe22f7a
-
SHA512
949ab1b4843a50dc17cb7fd1e25df8801ccbc4c756a92f06f72add76441763eea9ccfc02e03eba5d6eb22f8008aeb281bbc182283cfda12ef81169dcf97210af
-
SSDEEP
98304:ZrXpmjkwDeUdgOps8IlXP4YNqzruaI6HMaJTtGb:xIYOClf5aI6HMaJTtGb
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-16_60bb08876657fa77f5ff832c114f6464_frostygoop_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://jokeprvffat.cyou/api
Targets
-
-
Target
2025-01-16_60bb08876657fa77f5ff832c114f6464_frostygoop_poet-rat_snatch
-
Size
5.4MB
-
MD5
60bb08876657fa77f5ff832c114f6464
-
SHA1
2f8a1ee884425d7576e50a6a186bc44a9d22efba
-
SHA256
335f697c3be8cac622f3ebcd5107b0bad45ac1de22f7c06fffd334ebffe22f7a
-
SHA512
949ab1b4843a50dc17cb7fd1e25df8801ccbc4c756a92f06f72add76441763eea9ccfc02e03eba5d6eb22f8008aeb281bbc182283cfda12ef81169dcf97210af
-
SSDEEP
98304:ZrXpmjkwDeUdgOps8IlXP4YNqzruaI6HMaJTtGb:xIYOClf5aI6HMaJTtGb
-
Lumma family
-
Suspicious use of SetThreadContext
-