General

  • Target

    2025-03-30_92389243320c12f5f312fdd630e1ef6b_poet-rat_snatch

  • Size

    11.5MB

  • MD5

    92389243320c12f5f312fdd630e1ef6b

  • SHA1

    3c33c51d3f62ffdf6d33b309af1b92ab75099be3

  • SHA256

    353873fe8c946c5c20e803b311621180988fc9220ec53d56707769bab9eae034

  • SHA512

    335a9d451393af71329288795e3b89800ddcdd75db92ec24714f5da740d6d058a1ea6e03a8219930f070762132df3b83d7047b5ef2a65b7905218e91e96bb240

  • SSDEEP

    98304:KfP0vxbA0oMBna4UO2U4XvRPspyaYSitOCTwFlde56xqK:xfo3Zu

Score
10/10

Malware Config

Signatures

  • Detect SalatStealer payload 1 IoCs
  • Salatstealer family
  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-03-30_92389243320c12f5f312fdd630e1ef6b_poet-rat_snatch
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections