Analysis
-
max time kernel
122s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
31-01-2025 21:23
General
-
Target
2025-01-31_1f525c2efc261a58c6a1622b90c615d1_frostygoop_luca-stealer_poet-rat_sliver_snatch.exe
-
Size
18.6MB
-
MD5
1f525c2efc261a58c6a1622b90c615d1
-
SHA1
07b7773701fbbc4bdcea6768ede4683a1732fb63
-
SHA256
2bdecdb320983b9e7d6e3e1d9d3769c746b2eb7adda3438b7c56f061be44b773
-
SHA512
aeb07e85d4d80a9ed5cce93bdd90c9214244e3ba3b52d5a2d1e06cb5c4dfaafade42f6e97b8b9191b27d81348bfa9446d075efa82265bc577a60d278f801a2d0
-
SSDEEP
196608:IBIr9uQRt7K5XPJkGBeNHLCKGtqzJcRfjk:XYQRNEXPKGoN0l
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-01-31_1f525c2efc261a58c6a1622b90c615d1_frostygoop_luca-stealer_poet-rat_sliver_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2025-01-31_1f525c2efc261a58c6a1622b90c615d1_frostygoop_luca-stealer_poet-rat_sliver_snatch.exe"1⤵
- Unexpected DNS network traffic destination