General
-
Target
2025-01-24_655bef72235aaad69a2dbd5ad7790c2e_frostygoop_poet-rat_snatch
-
Size
6.2MB
-
Sample
250124-d3mb4axmgw
-
MD5
655bef72235aaad69a2dbd5ad7790c2e
-
SHA1
ba2ce943a3dedbbc0b150a0fd1c8b8107224ee02
-
SHA256
158b11e1d2921e17de74750c7f391e68357b6412e3f9ef7ddf53d1c08cff9388
-
SHA512
bbe41ce4ed375c2e3f978fc4d74fa5bbc6a651b2b345198a44f6662f5a2e58eff666422b047e9203bdfd4b8e400a91ceac04861d8d99cd994512bcdb3f46c453
-
SSDEEP
98304:+yZabdURyahFrM51Q+/ptahx1NWSI8xl:1ysc51Q+/ptahxu8x
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-24_655bef72235aaad69a2dbd5ad7790c2e_frostygoop_poet-rat_snatch.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://tuttlecombe.click/api
Targets
-
-
Target
2025-01-24_655bef72235aaad69a2dbd5ad7790c2e_frostygoop_poet-rat_snatch
-
Size
6.2MB
-
MD5
655bef72235aaad69a2dbd5ad7790c2e
-
SHA1
ba2ce943a3dedbbc0b150a0fd1c8b8107224ee02
-
SHA256
158b11e1d2921e17de74750c7f391e68357b6412e3f9ef7ddf53d1c08cff9388
-
SHA512
bbe41ce4ed375c2e3f978fc4d74fa5bbc6a651b2b345198a44f6662f5a2e58eff666422b047e9203bdfd4b8e400a91ceac04861d8d99cd994512bcdb3f46c453
-
SSDEEP
98304:+yZabdURyahFrM51Q+/ptahx1NWSI8xl:1ysc51Q+/ptahxu8x
-
Lumma family
-
Suspicious use of SetThreadContext
-