General
-
Target
ChaserTempCRACKED.zip
-
Size
4.5MB
-
Sample
240903-rtlabsyhnm
-
MD5
110ef86686ba4be41314e43de2462cd8
-
SHA1
3b9e33319f8693d32ac3fe1a0a75b0afb478de1a
-
SHA256
c037429f30412b9308880840a0a5ee836ddd685e1af97c67853fed62308516c7
-
SHA512
e5d94bbb8fe50f03391bf37c609d015d4653f1c055c4d15cd93a7ed167271afd3a08530be73d6d62198970e49c2909bff9345ffeff122f313494fcf5f56921ee
-
SSDEEP
98304:D8JQ9csmb+XU5lemYidFoJjNKdSkGa72mqE2mTgbNJNLzxQcgwH382I/nnD:D8JQWFb5ThvouAbBDnDgi82IfD
Static task
static1
Behavioral task
behavioral1
Sample
Morphine.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Morphine.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
bypassed.exe
Resource
win7-20240704-en
Malware Config
Targets
-
-
Target
Morphine.exe
-
Size
5.8MB
-
MD5
c61fbe172730e0e221f4abe4069dd8e9
-
SHA1
f0b7f3d5b45537c3250db2ce7f15bc74e545cab3
-
SHA256
b4af9f34ccb4774459d6586598e0c32e7ffcd5efb45226e2d47da7def44dcc83
-
SHA512
f03559718dbba771620269ac5a5c0a1aefdf74e37f3fdf84c6bab39f4cc859494fd053763642debe19c99ce3f356513c23d42eb2c8c33aa5e8447b864ba70490
-
SSDEEP
98304:EQga0jRCaCW6ndTqZoQjc5SpMI0IT4bNJFY3OqtA/TmnZgVuNxL8IZ:3gH0ZW0dTqnc52CjBHYUTmnqVCV8q
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
-
-
Target
bypassed.exe
-
Size
90KB
-
MD5
5d046cd83e8e4bbb64ca82a250e90ea8
-
SHA1
231c777db2aaa5677953a275137e8959ecc447ff
-
SHA256
049ea73a545bf2c262f03a53e2c54020dbf3314b694d37d0d0255768c73cbcf1
-
SHA512
6c6f5ab99735353b65eed9efd7b3f5cd90f5879cdc67856384be9aa22022377404632bea26b7c26ae771f07515251a67c360da7d3d76e76091a729d2d4bfeb87
-
SSDEEP
1536:j7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfNw3ON:/7DhdC6kzWypvaQ0FxyNTBfNr
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Drops file in Drivers directory
-