General
-
Target
2025-01-28_217d772e62543d3cd9a7d0d519501f48_frostygoop_poet-rat_snatch
-
Size
8.8MB
-
Sample
250128-zhf58s1lcx
-
MD5
217d772e62543d3cd9a7d0d519501f48
-
SHA1
dc0ca88b1bac0e1c2db1b3af0b59a141b6c6dc20
-
SHA256
758a90a42b1b4a9da2026f2158428af3fd22b69d6b2cbbf3cc09638f64f73e17
-
SHA512
7edf889d853c67698b3388a160f42dd582b82cc3159d81e48494185bdd6da202a4c011861ca64ac66a2f8ead1cf41d33a35b51689ce324dcdc6faf71cec932ef
-
SSDEEP
98304:Yw7Fn1sXCVVVywiAOwBMxaIRCMYbC4VXIm5R1w:lXgA/BiaiCTbp5rw
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-28_217d772e62543d3cd9a7d0d519501f48_frostygoop_poet-rat_snatch.exe
Resource
win7-20240903-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
2025-01-28_217d772e62543d3cd9a7d0d519501f48_frostygoop_poet-rat_snatch
-
Size
8.8MB
-
MD5
217d772e62543d3cd9a7d0d519501f48
-
SHA1
dc0ca88b1bac0e1c2db1b3af0b59a141b6c6dc20
-
SHA256
758a90a42b1b4a9da2026f2158428af3fd22b69d6b2cbbf3cc09638f64f73e17
-
SHA512
7edf889d853c67698b3388a160f42dd582b82cc3159d81e48494185bdd6da202a4c011861ca64ac66a2f8ead1cf41d33a35b51689ce324dcdc6faf71cec932ef
-
SSDEEP
98304:Yw7Fn1sXCVVVywiAOwBMxaIRCMYbC4VXIm5R1w:lXgA/BiaiCTbp5rw
-
Lumma family
-
Suspicious use of SetThreadContext
-