Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2025-03-13_67b2a6a172e746f02921ead44516cad4_poet-rat_sliver_snatch
-
Size
10.0MB
-
Sample
250313-p15answjv4
-
MD5
67b2a6a172e746f02921ead44516cad4
-
SHA1
504fef826de2671410dbae5aff57dadc2c006e89
-
SHA256
2683d0308689c1825162f32921513da9c0898a078b0286d5f92a2a137ff2f981
-
SHA512
3490dfbe5e5d51eaa98ce7ffa534a7cea246cb7e405012e287037d7c54a70d8109456852e8990b9af06f19e63d3d6c6aa0f38119c1ebbdbdb20fe7f1aed9ca99
-
SSDEEP
196608:I+D5q1SGs2yRwtkpqShRBhR3hRbhRchRNhRp:DAkLRLRxRtRARfRp
Static task
static1
Behavioral task
behavioral1
Sample
2025-03-13_67b2a6a172e746f02921ead44516cad4_poet-rat_sliver_snatch.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
2025-03-13_67b2a6a172e746f02921ead44516cad4_poet-rat_sliver_snatch.exe
Resource
win10v2004-20250217-en
Malware Config
Targets
-
-
Target
2025-03-13_67b2a6a172e746f02921ead44516cad4_poet-rat_sliver_snatch
-
Size
10.0MB
-
MD5
67b2a6a172e746f02921ead44516cad4
-
SHA1
504fef826de2671410dbae5aff57dadc2c006e89
-
SHA256
2683d0308689c1825162f32921513da9c0898a078b0286d5f92a2a137ff2f981
-
SHA512
3490dfbe5e5d51eaa98ce7ffa534a7cea246cb7e405012e287037d7c54a70d8109456852e8990b9af06f19e63d3d6c6aa0f38119c1ebbdbdb20fe7f1aed9ca99
-
SSDEEP
196608:I+D5q1SGs2yRwtkpqShRBhR3hRbhRchRNhRp:DAkLRLRxRtRARfRp
Score6/10-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-