General
-
Target
RocketTitles.zip
-
Size
1.5MB
-
Sample
240503-y5t5yaee3x
-
MD5
7dd05f819255513aa9a187e775b06c3d
-
SHA1
b25f75593701c24442038125a90fdf3cda9b7210
-
SHA256
d7456df971115ded67c517fca99f4c26d622464f62a4b19b9ccfb8522a3660b6
-
SHA512
16b32149e0463579481aefb0e4fbeb49a8fa266769beb73bc21bb5316f294209352d8dc0b0b97cce7586658989c80efe2441cbcb4bf050f7d8e24f58cc04a048
-
SSDEEP
24576:vkPAL8N9Bs8YqGyWSBrsp/TyJrR/APhbXXKPh5GvpFiqTz+5J:vkPAL2ZYMYp0BQ2Ph5GvucIJ
Behavioral task
behavioral1
Sample
RocketTitles.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
Guna.UI2.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral4
Sample
Newtonsoft.Json.xml
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
RocketTitles.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral6
Sample
RocketTitles.exe.config
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
RocketTitles.pdb
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
RocketTitles.zip
-
Size
1.5MB
-
MD5
7dd05f819255513aa9a187e775b06c3d
-
SHA1
b25f75593701c24442038125a90fdf3cda9b7210
-
SHA256
d7456df971115ded67c517fca99f4c26d622464f62a4b19b9ccfb8522a3660b6
-
SHA512
16b32149e0463579481aefb0e4fbeb49a8fa266769beb73bc21bb5316f294209352d8dc0b0b97cce7586658989c80efe2441cbcb4bf050f7d8e24f58cc04a048
-
SSDEEP
24576:vkPAL8N9Bs8YqGyWSBrsp/TyJrR/APhbXXKPh5GvpFiqTz+5J:vkPAL2ZYMYp0BQ2Ph5GvucIJ
Score1/10 -
-
-
Target
Guna.UI2.dll
-
Size
2.1MB
-
MD5
c19e9e6a4bc1b668d19505a0437e7f7e
-
SHA1
73be712aef4baa6e9dabfc237b5c039f62a847fa
-
SHA256
9ac8b65e5c13292a8e564187c1e7446adc4230228b669383bd7b07035ab99a82
-
SHA512
b6cd0af436459f35a97db2d928120c53d3691533b01e4f0e8b382f2bd81d9a9a2c57e5e2aa6ade9d6a1746d5c4b2ef6c88d3a0cf519424b34445d0d30aab61de
-
SSDEEP
49152:6QNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckYf+Yh/FJ3:6Ahck2z
Score1/10 -
-
-
Target
Newtonsoft.Json.dll
-
Size
695KB
-
MD5
195ffb7167db3219b217c4fd439eedd6
-
SHA1
1e76e6099570ede620b76ed47cf8d03a936d49f8
-
SHA256
e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
-
SHA512
56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
-
SSDEEP
12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
Score1/10 -
-
-
Target
Newtonsoft.Json.xml
-
Size
696KB
-
MD5
d398ffe9fdac6a53a8d8bb26f29bbb3c
-
SHA1
bffceebb85ca40809e8bcf5941571858e0e0cb31
-
SHA256
79ee87d4ede8783461de05b93379d576f6e8575d4ab49359f15897a854b643c4
-
SHA512
7db8aac5ff9b7a202a00d8acebce85df14a7af76b72480921c96b6e01707416596721afa1fa1a9a0563bf528df3436155abc15687b1fee282f30ddcc0ddb9db7
-
SSDEEP
6144:XqqU+k/Rik5aG0rH3jGHdl0/IdHXpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185QA:DU1
Score1/10 -
-
-
Target
RocketTitles.exe
-
Size
464KB
-
MD5
e1395ea61b65453b66db784aef77ff57
-
SHA1
1334adc0e0bedff3a223998b1574d71eab95ee9b
-
SHA256
e76f199c4a387a3d011a48478f1ad6995fd4ebe2d3bc27eef006b54450defcfe
-
SHA512
cf9ccac9c4dd38cfb19c63d4f8099fbc6ec91873ed193bbe6e507410b6f18634e3b566568ea11d805327874c2e3308e70ea5441026ddeaa85cd2d57d20b4c3b7
-
SSDEEP
12288:Rayt0QPkDUyTfvqCT/4k2QjqGpNBOewDlW:R/EDR3qCr4khqGrUtDlW
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
-
-
Target
RocketTitles.exe.config
-
Size
189B
-
MD5
9dbad5517b46f41dbb0d8780b20ab87e
-
SHA1
ef6aef0b1ea5d01b6e088a8bf2f429773c04ba5e
-
SHA256
47e5a0f101af4151d7f13d2d6bfa9b847d5b5e4a98d1f4674b7c015772746cdf
-
SHA512
43825f5c26c54e1fc5bffcce30caad1449a28c0c9a9432e9ce17d255f8bf6057c1a1002d9471e5b654ab1de08fb6eabf96302cdb3e0fb4b63ba0ff186e903be8
Score3/10 -
-
-
Target
RocketTitles.pdb
-
Size
177KB
-
MD5
7584f539c85624ea1948ee1ed5c2f709
-
SHA1
8a7b6487ade9c02caeefb9081f0abdfab2831837
-
SHA256
51bc20a935529d1913d657378cbd650ec7b3efe9ece09f45055d230b0b21db6b
-
SHA512
9ae4eb84717eaa64fc2ca12797e4d5c943f4dc57ddb31e2513b64d7ca45f7606bf8c398d46dd29f31686ddc834525db6a8f0f8b61570230bc17495de3d6439ed
-
SSDEEP
3072:KksI+n4wqd1lRLD42BLqeETIP20QFzTsS00r32CirqpIPR0QFzTsS00r32mi:L+n4wS1lRD42QeETIP20QFzTsS00r3Ta
Score3/10 -