Overview

overview

10

Static

static

10

2025-03-13...ch.exe

windows7-x64

1

2025-03-13...ch.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-13_67dd4c24a0ba72753c63756f39249793_poet-rat_snatch

  • Size

    6.5MB

  • MD5

    67dd4c24a0ba72753c63756f39249793

  • SHA1

    0724af53c68cc5894b0bd0ea6d88d55cf592faa9

  • SHA256

    0b4c078759a2b56f8519b868d06186135748eb2bef77dae58b193acc90d07cf8

  • SHA512

    de4da2acb1b8c6455f9af37da97fe2376fcca43809b7ed09a52f1a63478d2f08322965bcf6a7361e8a1f243145c083821cb9f63dcc141cbb3b9acf8e2310b4d0

  • SSDEEP

    49152:E3/n2UcyKARqqRp+KrZs12Oi17PgRNWPmfQpPmoFjPnMBFdk3Vk9WqWLNlBDszUT:Of2GTrREchPMopfMdkl

Score
10/10
wellmess

Malware Config

Extracted

Family

wellmess

C2

http://178.211.39.6:80

https://141.98.212.55:121
rsa_privkey.plain
rsa_pubkey.plain
rsa_pubkey.plain
rsa_pubkey.plain

Signatures

  • Wellmess family
    wellmess
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-03-13_67dd4c24a0ba72753c63756f39249793_poet-rat_snatch
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections