Overview

overview

10

Static

static

10

2025-04-14...ch.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-14_650a6bc4d146348a883c33f0718865b5_frostygoop_knight_luca-stealer_ngrbot_poet-rat_sliver_snatch

  • Size

    10.3MB

  • Sample

    250414-zdvsts1jv3

  • MD5

    650a6bc4d146348a883c33f0718865b5

  • SHA1

    4f4f6d242ec72e038d3bb8635f0b03108f8a63b2

  • SHA256

    a05bd87a2506e3a4b40be2d7e6d1b63ae3c4cb9ed61bd0f82bae5fbf1c8e5b77

  • SHA512

    5f088e5e5a1b9480343fa08f90091fe3fc42e9c1dea6a4fada037fe61b5bbd9706828189e3af3e1a750769ca458b3c38ce68bbfe3a2e7459f33dbe612e34ba30

  • SSDEEP

    98304:xkbS4GeZk9WMOfpgu+NsFUqNEXIR/wLA0rn7QEMb:xd4dZkFu+NsyCEXIR/wcypMb

Score
10/10
skuldpersistence

Malware Config

Targets

    • Target

      2025-04-14_650a6bc4d146348a883c33f0718865b5_frostygoop_knight_luca-stealer_ngrbot_poet-rat_sliver_snatch

    • Size

      10.3MB

    • MD5

      650a6bc4d146348a883c33f0718865b5

    • SHA1

      4f4f6d242ec72e038d3bb8635f0b03108f8a63b2

    • SHA256

      a05bd87a2506e3a4b40be2d7e6d1b63ae3c4cb9ed61bd0f82bae5fbf1c8e5b77

    • SHA512

      5f088e5e5a1b9480343fa08f90091fe3fc42e9c1dea6a4fada037fe61b5bbd9706828189e3af3e1a750769ca458b3c38ce68bbfe3a2e7459f33dbe612e34ba30

    • SSDEEP

      98304:xkbS4GeZk9WMOfpgu+NsFUqNEXIR/wLA0rn7QEMb:xd4dZkFu+NsyCEXIR/wcypMb

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks