Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
27/01/2025, 15:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025-01-27_397996544d3c6a43cc9e0c24ef9ce755_aspxspy_poet-rat_snatch.exe
Resource
win7-20241010-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-01-27_397996544d3c6a43cc9e0c24ef9ce755_aspxspy_poet-rat_snatch.exe
Resource
win10v2004-20241007-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2025-01-27_397996544d3c6a43cc9e0c24ef9ce755_aspxspy_poet-rat_snatch.exe
command="C:\Users\Admin\AppData\Local\Temp\2025-01-27_397996544d3c6a43cc9e0c24ef9ce755_aspxspy_poet-rat_snatch.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2025-01-27_397996544d3c6a43cc9e0c24ef9ce755_aspxspy_poet-rat_snatch.exe
- Size 3.5MB
- Sample250127-seflzatpcs
- SHA256 ffd7f4f071c22ad2045fea7ede616e44cffc19b934d25c8a98c4dbb5850bee6c
- MD5 397996544d3c6a43cc9e0c24ef9ce755
- SHA1 c5b20efcfe6ce845967b7cde1194c20d8edee9ef
- SHA512 1a27caf548d082c87f9dc43c32d7fa5d8703709bb61207bdbb2c837e8d0ce9f9868c563fa95b18fca5ce2302316eed2d5a561b1435507f12b07d702ecbc8368f
- SSDEEP 49152:r56uL3pgrCEdMKPFotsgEBr6GjvzW+UBA3Gd7po52xWKQY2Sfc3f:r56utgpPFotBER/mQt
- MD5 SHA1 SHA512 SSDEEP
Score
1/10