Analysis

  • max time kernel
    93s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250217-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/03/2025, 12:58

General

  • Target

    2025-03-08_d3fd3c0abb49d2d4d15fcec1755a3bb5_poet-rat_sliver_snatch.exe

  • Size

    13.0MB

  • MD5

    d3fd3c0abb49d2d4d15fcec1755a3bb5

  • SHA1

    609f42f6eeab23b6772dc0a819f4dc47ec57269d

  • SHA256

    4c9c98242092cd5910bac7bb6b53b795a8421ca303b0271fe6f329e1c337c693

  • SHA512

    6e33e733fdc2fe3357b5a25755ad00e480e650daa9e3c043ed75e6bf865ddb8be77496fd5b9fa59721cf0d2d62bb79397406032bc4b8b75a54e53ff58935494f

  • SSDEEP

    196608:GKouOB/7eXB94InJrRx/2Xh0cGf7kz6bIHEvTVPEBBJsv:zIYB9trWh0BOabVPmsv

Score
1/10

Malware Config

Signatures

  • GoLang User-Agent 45 IoCs

    Uses default user-agent string defined by GoLang HTTP packages.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-03-08_d3fd3c0abb49d2d4d15fcec1755a3bb5_poet-rat_sliver_snatch.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-03-08_d3fd3c0abb49d2d4d15fcec1755a3bb5_poet-rat_sliver_snatch.exe"
    1⤵
      PID:2536

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads