Overview

overview

10

Static

static

3

2025-01-18...ch.exe

windows7-x64

10

2025-01-18...ch.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-18_55d1743c6e6b4415e26b9f212b78b60d_frostygoop_poet-rat_snatch

  • Size

    16.6MB

  • Sample

    250118-f4ttnsvnck

  • MD5

    55d1743c6e6b4415e26b9f212b78b60d

  • SHA1

    4ad30a946d47415eecb58822a5691c17367d94d1

  • SHA256

    635397c435023caf81570f0166fd39f86a5a55a4b51c6d1865b89596999d015c

  • SHA512

    9646944bd1bd0398ef2e1a2939b0ad7744b7d510b58649c3d3e1d2bc57eeb2e19e309cf045af5ac860999521d6bf64c20fdc153962045d21090757a726e40f83

  • SSDEEP

    98304:LsAJHVhW3E5boRRRQPZINp2uxxUJSAnIs5W/tTB:AAETRPxxUJs9

Score
10/10
povertystealerdiscoverystealer

Malware Config

Targets

    • Target

      2025-01-18_55d1743c6e6b4415e26b9f212b78b60d_frostygoop_poet-rat_snatch

    • Size

      16.6MB

    • MD5

      55d1743c6e6b4415e26b9f212b78b60d

    • SHA1

      4ad30a946d47415eecb58822a5691c17367d94d1

    • SHA256

      635397c435023caf81570f0166fd39f86a5a55a4b51c6d1865b89596999d015c

    • SHA512

      9646944bd1bd0398ef2e1a2939b0ad7744b7d510b58649c3d3e1d2bc57eeb2e19e309cf045af5ac860999521d6bf64c20fdc153962045d21090757a726e40f83

    • SSDEEP

      98304:LsAJHVhW3E5boRRRQPZINp2uxxUJSAnIs5W/tTB:AAETRPxxUJs9

    Score
    10/10
    povertystealerdiscoverystealer

    • Detect Poverty Stealer Payload

    • Poverty Stealer

      Poverty Stealer is a crypto and infostealer written in C++.

      stealerpovertystealer

    • Povertystealer family

      povertystealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks