General
-
Target
2025-01-29_cfef04ea493e91d89c1fd46b3bd9ea14_frostygoop_poet-rat_snatch
-
Size
5.9MB
-
Sample
250129-3pegrssph1
-
MD5
cfef04ea493e91d89c1fd46b3bd9ea14
-
SHA1
a27b76399a4ac657a7517862ede26a383b278fb6
-
SHA256
abf5a322dc32fef4bb9750165fe82e4344fdaefb79af403afd8de64dd9cdce4d
-
SHA512
d2c466a03a1f4b164d2dff3fd064abaf5a83b82c7fc304b3e0354b57953f9ee95a3adb713a0851eb64e6c6fa94e7973f2740024d03147bf958fb1a9a7343d931
-
SSDEEP
49152:6cT+4Ppzg5xTe2QvAr05U+bFdvOy/rzBgmW2I0/9T8vEbZr4APmpGQKf7azauWtg:6A3PpE5U2QvkeU+J/9t7PcjBSA
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-29_cfef04ea493e91d89c1fd46b3bd9ea14_frostygoop_poet-rat_snatch.exe
Resource
win7-20241023-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
2025-01-29_cfef04ea493e91d89c1fd46b3bd9ea14_frostygoop_poet-rat_snatch
-
Size
5.9MB
-
MD5
cfef04ea493e91d89c1fd46b3bd9ea14
-
SHA1
a27b76399a4ac657a7517862ede26a383b278fb6
-
SHA256
abf5a322dc32fef4bb9750165fe82e4344fdaefb79af403afd8de64dd9cdce4d
-
SHA512
d2c466a03a1f4b164d2dff3fd064abaf5a83b82c7fc304b3e0354b57953f9ee95a3adb713a0851eb64e6c6fa94e7973f2740024d03147bf958fb1a9a7343d931
-
SSDEEP
49152:6cT+4Ppzg5xTe2QvAr05U+bFdvOy/rzBgmW2I0/9T8vEbZr4APmpGQKf7azauWtg:6A3PpE5U2QvkeU+J/9t7PcjBSA
-
Lumma family
-
Suspicious use of SetThreadContext
-