General
-
Target
chrme.exe
-
Size
3.8MB
-
Sample
240424-vhaagade8y
-
MD5
ee00a6f2b4c502a4132bb362c22ebfc9
-
SHA1
0dd02a779556215993bd7d8a91ff47f59c76c0ad
-
SHA256
d63479ab0f886e83ad5b3a87021cd0f9e68a55bc95c1ac0f6f2b9bd505bb7855
-
SHA512
c379e97965c6ef4dac4222950d7a005060a2d004494b87675b8952ab5454505caecea7e98f7282e7f9bb93ed2422e2687c307d6797f3cc9d1723e9a6ba302044
-
SSDEEP
98304:bmhr/7J8d9gYg5T39WNqpvh1w6GDk0Y7K5JEyUaJnraU11lwnkqXf0FF:b+nJUgj0I5h1lGg0gKHEyUeLXl0kSIF
Static task
static1
Behavioral task
behavioral1
Sample
chrme.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
chrme.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
chrme.exe
-
Size
3.8MB
-
MD5
ee00a6f2b4c502a4132bb362c22ebfc9
-
SHA1
0dd02a779556215993bd7d8a91ff47f59c76c0ad
-
SHA256
d63479ab0f886e83ad5b3a87021cd0f9e68a55bc95c1ac0f6f2b9bd505bb7855
-
SHA512
c379e97965c6ef4dac4222950d7a005060a2d004494b87675b8952ab5454505caecea7e98f7282e7f9bb93ed2422e2687c307d6797f3cc9d1723e9a6ba302044
-
SSDEEP
98304:bmhr/7J8d9gYg5T39WNqpvh1w6GDk0Y7K5JEyUaJnraU11lwnkqXf0FF:b+nJUgj0I5h1lGg0gKHEyUeLXl0kSIF
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-