General
- Target ChaserTempCRACKED.zip
- Size 4.5MB
- Sample240903-rtlabsyhnm
- SHA256 c037429f30412b9308880840a0a5ee836ddd685e1af97c67853fed62308516c7
- MD5 110ef86686ba4be41314e43de2462cd8
- SHA1 3b9e33319f8693d32ac3fe1a0a75b0afb478de1a
- SHA512 e5d94bbb8fe50f03391bf37c609d015d4653f1c055c4d15cd93a7ed167271afd3a08530be73d6d62198970e49c2909bff9345ffeff122f313494fcf5f56921ee
- SSDEEP 98304:D8JQ9csmb+XU5lemYidFoJjNKdSkGa72mqE2mTgbNJNLzxQcgwH382I/nnD:D8JQWFb5ThvouAbBDnDgi82IfD
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Morphine.exe
Resource
win7-20240708-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Morphine.exe
Resource
win10v2004-20240802-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
bypassed.exe
Resource
win7-20240704-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Morphine.exe
- Size 5.8MB
- SHA256 b4af9f34ccb4774459d6586598e0c32e7ffcd5efb45226e2d47da7def44dcc83
- MD5 c61fbe172730e0e221f4abe4069dd8e9
- SHA1 f0b7f3d5b45537c3250db2ce7f15bc74e545cab3
- SHA512 f03559718dbba771620269ac5a5c0a1aefdf74e37f3fdf84c6bab39f4cc859494fd053763642debe19c99ce3f356513c23d42eb2c8c33aa5e8447b864ba70490
- SSDEEP 98304:EQga0jRCaCW6ndTqZoQjc5SpMI0IT4bNJFY3OqtA/TmnZgVuNxL8IZ:3gH0ZW0dTqnc52CjBHYUTmnqVCV8q
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
- Target bypassed.exe
- Size 90KB
- SHA256 049ea73a545bf2c262f03a53e2c54020dbf3314b694d37d0d0255768c73cbcf1
- MD5 5d046cd83e8e4bbb64ca82a250e90ea8
- SHA1 231c777db2aaa5677953a275137e8959ecc447ff
- SHA512 6c6f5ab99735353b65eed9efd7b3f5cd90f5879cdc67856384be9aa22022377404632bea26b7c26ae771f07515251a67c360da7d3d76e76091a729d2d4bfeb87
- SSDEEP 1536:j7fbN3eEDhDPA/pICdUkbBtW7upvaLU0bI5taxKo0IOlnToIfNw3ON:/7DhdC6kzWypvaQ0FxyNTBfNr
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Drops file in Drivers directory
MITRE ATT&CK Enterprise v15
Tasks
static1
Score
3/10
behavioral1
agenttesladiscoverykeyloggerspywarestealertrojan
Score
10/10
behavioral2
agenttesladiscoverykeyloggerspywarestealertrojan
Score
10/10
behavioral3
agenttesladiscoverykeyloggerspywarestealertrojan
Score
10/10
behavioral4
agenttesladiscoverykeyloggerspywarestealertrojan
Score
10/10