General
-
Target
2025-01-21_062250dd669c1ee2ffad83db43299d54_frostygoop_poet-rat_snatch
-
Size
4.7MB
-
Sample
250121-sr14faznhz
-
MD5
062250dd669c1ee2ffad83db43299d54
-
SHA1
5f08e6b25ca2f60968f9ac52fe0e49021a06dad0
-
SHA256
d1996d01d478657c7be1734d37e0326f778eff4e7f6283fca1e8a427cc1a94e4
-
SHA512
5fa3db5fdeca440bd9a858f004bcc0039171d20dd07d1027723d548487b33fa515289f9764476ba7273befd187e79e07dc1b6be3d139f8a3b8628ee17018533d
-
SSDEEP
49152:uH+t33D6u8hCI6qD5LGo8TOGPkJ85zhQoD66K+BSkFW5o1Ud6x1:ue9zyhC5kioWksz1BSkb1
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-21_062250dd669c1ee2ffad83db43299d54_frostygoop_poet-rat_snatch.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://kitestarepatt.click/api
Targets
-
-
Target
2025-01-21_062250dd669c1ee2ffad83db43299d54_frostygoop_poet-rat_snatch
-
Size
4.7MB
-
MD5
062250dd669c1ee2ffad83db43299d54
-
SHA1
5f08e6b25ca2f60968f9ac52fe0e49021a06dad0
-
SHA256
d1996d01d478657c7be1734d37e0326f778eff4e7f6283fca1e8a427cc1a94e4
-
SHA512
5fa3db5fdeca440bd9a858f004bcc0039171d20dd07d1027723d548487b33fa515289f9764476ba7273befd187e79e07dc1b6be3d139f8a3b8628ee17018533d
-
SSDEEP
49152:uH+t33D6u8hCI6qD5LGo8TOGPkJ85zhQoD66K+BSkFW5o1Ud6x1:ue9zyhC5kioWksz1BSkb1
-
Lumma family
-
Suspicious use of SetThreadContext
-