General
-
Target
2025-01-18_c2fa90a7b29662af1888aa736a5da9f0_frostygoop_poet-rat_snatch
-
Size
20.9MB
-
Sample
250118-lc4sfszngr
-
MD5
c2fa90a7b29662af1888aa736a5da9f0
-
SHA1
d00b52d73f78b7a3e74dcb23b5d4315a2cff3174
-
SHA256
cb34abebfc7b5a1d7368598e649ec185a7a55516a2cc4856af7bd71a2df737e6
-
SHA512
2a97b1328c102bf9fa436939a7aa601fd952147120243f38522bf81e48063d4cd6364b28a7a284da5713bb58b0244d542863e66ce69dd853a058d697d3f2bd15
-
SSDEEP
98304:qwM40wXYLjljlFfBlZmpTXkePxRYnFN6ru04lorWsE70n:b5uxlJBaTXkePb6K3mJwn
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-18_c2fa90a7b29662af1888aa736a5da9f0_frostygoop_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://joinresperct.shop/api
Targets
-
-
Target
2025-01-18_c2fa90a7b29662af1888aa736a5da9f0_frostygoop_poet-rat_snatch
-
Size
20.9MB
-
MD5
c2fa90a7b29662af1888aa736a5da9f0
-
SHA1
d00b52d73f78b7a3e74dcb23b5d4315a2cff3174
-
SHA256
cb34abebfc7b5a1d7368598e649ec185a7a55516a2cc4856af7bd71a2df737e6
-
SHA512
2a97b1328c102bf9fa436939a7aa601fd952147120243f38522bf81e48063d4cd6364b28a7a284da5713bb58b0244d542863e66ce69dd853a058d697d3f2bd15
-
SSDEEP
98304:qwM40wXYLjljlFfBlZmpTXkePxRYnFN6ru04lorWsE70n:b5uxlJBaTXkePb6K3mJwn
-
Lumma family
-
Suspicious use of SetThreadContext
-