General
-
Target
2025-01-31_bf015edca4fa189c6f63d6fde21ceb89_frostygoop_poet-rat_snatch
-
Size
8.6MB
-
Sample
250131-gx8jxsypa1
-
MD5
bf015edca4fa189c6f63d6fde21ceb89
-
SHA1
8be55ca5a671c97c871afe8ce6e967149e4a2743
-
SHA256
f2eb847110421c73324a98574940741c2dbf03863cedaf34df4e85fcf084751c
-
SHA512
ec6f1968ab7895a707c9a18534c2e6c3eab76642c67e31c95586af8d1fae9e97821e64a4ac47ce027701caf638d189a1f06f5f8ad07a122eee30ff9cf08c37e3
-
SSDEEP
49152:5bB5CXZxWxS6fToCa1JJly9m7xEsB/5+stMMv8Kr3PjtPE8E2DhP8qTg3+Ufv8Cc:5bb8sSes1JJ2WOsDvvN++0rOhJCOUC9
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-31_bf015edca4fa189c6f63d6fde21ceb89_frostygoop_poet-rat_snatch.exe
Resource
win7-20241010-en
Malware Config
Extracted
lumma
https://toppyneedus.biz/api
Targets
-
-
Target
2025-01-31_bf015edca4fa189c6f63d6fde21ceb89_frostygoop_poet-rat_snatch
-
Size
8.6MB
-
MD5
bf015edca4fa189c6f63d6fde21ceb89
-
SHA1
8be55ca5a671c97c871afe8ce6e967149e4a2743
-
SHA256
f2eb847110421c73324a98574940741c2dbf03863cedaf34df4e85fcf084751c
-
SHA512
ec6f1968ab7895a707c9a18534c2e6c3eab76642c67e31c95586af8d1fae9e97821e64a4ac47ce027701caf638d189a1f06f5f8ad07a122eee30ff9cf08c37e3
-
SSDEEP
49152:5bB5CXZxWxS6fToCa1JJly9m7xEsB/5+stMMv8Kr3PjtPE8E2DhP8qTg3+Ufv8Cc:5bb8sSes1JJ2WOsDvvN++0rOhJCOUC9
-
Lumma family
-
Suspicious use of SetThreadContext
-