General
-
Target
2025-01-25_fcd46ef7868b47201f2b33312b755cbb_frostygoop_poet-rat_snatch
-
Size
10.3MB
-
Sample
250125-tz2wdasncm
-
MD5
fcd46ef7868b47201f2b33312b755cbb
-
SHA1
cf8e997a715d576a0184c68a9eee788065a1af58
-
SHA256
fb3cf1aefe56b1aa9a819fd32cc6d9a25d3be51b5479de8d1736079cb081603a
-
SHA512
3828631f4e0b988d4e13d8b768eb26aa6b3024e601bed37814adca6d12922838445bf845036eafe23dd2a3335d8da8091e27e0912792b856b43818e65cf08048
-
SSDEEP
98304:rqmiMOktmMNSBFFTUXM14w4R/0E0UTDvkXYKHAGuo1X+zYIwXhToqTxO3sBHvd:mmYjF11SBvOxO8BF
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-25_fcd46ef7868b47201f2b33312b755cbb_frostygoop_poet-rat_snatch.exe
Resource
win7-20241023-en
Malware Config
Extracted
lumma
https://kitestarepatt.click/api
https://toppyneedus.biz/api
Targets
-
-
Target
2025-01-25_fcd46ef7868b47201f2b33312b755cbb_frostygoop_poet-rat_snatch
-
Size
10.3MB
-
MD5
fcd46ef7868b47201f2b33312b755cbb
-
SHA1
cf8e997a715d576a0184c68a9eee788065a1af58
-
SHA256
fb3cf1aefe56b1aa9a819fd32cc6d9a25d3be51b5479de8d1736079cb081603a
-
SHA512
3828631f4e0b988d4e13d8b768eb26aa6b3024e601bed37814adca6d12922838445bf845036eafe23dd2a3335d8da8091e27e0912792b856b43818e65cf08048
-
SSDEEP
98304:rqmiMOktmMNSBFFTUXM14w4R/0E0UTDvkXYKHAGuo1X+zYIwXhToqTxO3sBHvd:mmYjF11SBvOxO8BF
-
Lumma family
-
Suspicious use of SetThreadContext
-