Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
27/01/2025, 16:52
General
-
Target
2025-01-27_78c6a8a4a60bf04fb486142272670059_frostygoop_poet-rat_snatch.exe
-
Size
8.9MB
-
MD5
78c6a8a4a60bf04fb486142272670059
-
SHA1
83433f593235b101ac529818482b463eba30711e
-
SHA256
c2e2b6f21ba218489d05c572c4fa0b96b24662ae69ec9f318ba0071f1be079f5
-
SHA512
e285e85b923ae98e8a7a1b948d8269460ee17ca16a7819f137385b98adbc65a41871e9c65389625a9b7edc68a4df69e9a5a2b3e895e112b9de6c1cd0de9e2c54
-
SSDEEP
98304:0yP/Ui/TbjMC27sjjmcfDhZytTD5iqlg:nkup/mc7hwNe
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-01-27_78c6a8a4a60bf04fb486142272670059_frostygoop_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2025-01-27_78c6a8a4a60bf04fb486142272670059_frostygoop_poet-rat_snatch.exe"1⤵
- System Location Discovery: System Language Discovery