Analysis
-
max time kernel
92s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
23-02-2025 01:14
General
-
Target
2025-02-23_4fd34c4c2112402f3ebd56578b29c417_frostygoop_luca-stealer_poet-rat_snatch.exe
-
Size
9.0MB
-
MD5
4fd34c4c2112402f3ebd56578b29c417
-
SHA1
6f4f862c4dc0f2f9a9c8a71d70c068cf065c5e07
-
SHA256
340571f8dbc8d77e40c841de793e9293c282e3d0092965832855101ba9698bdf
-
SHA512
f559927202a0d248fe8ab523988462a4f3237c382b3783394d88728f11697be0073917c92609d30b21b2fa322588700448ecf1a716e08f1e2d52605fdab84231
-
SSDEEP
98304:R3i0ITz30Iy8fQJ4g15E9/2Qsl5fjgDUSOmuvf6:RyBT70I1fr9/2n76USj2f6
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-02-23_4fd34c4c2112402f3ebd56578b29c417_frostygoop_luca-stealer_poet-rat_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2025-02-23_4fd34c4c2112402f3ebd56578b29c417_frostygoop_luca-stealer_poet-rat_snatch.exe"1⤵
- Suspicious use of AdjustPrivilegeToken