Dexter[.]zip | Triage™

Dexter.zip

SHA256 8d977ff1e959b6f985fbc2a52c931c3632f6f7a5243460fb6a14ceabb25d4a4e
MD5 952af0061e7d1c2dcc11c6bec5c1b182
SHA1 2d977ed8e7fc49a62286b7f0a57963977be3053a
SHA512 bf37d0c26dda9bba3a8eced059cbe42a2d18ad6db879a3068913d77eae2c2a71719ca4f8969564caa2626e4c2d5094613b29cef1b839aff5b414c4c485523e72
SSDEEP 393216:VYDw27/J4Ztj1un61TgKVKAqHEXZoR+wd7Bk8uX1n0A01wnj/GO:ukUatj1u61gKVzeqo3xG1dj/GO
TLSH
T1C8373334B94F9C24AB02312D6FFA85F46EF475862E00DE9658A112434D4FD8EEE4DBD8
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

dexter_dk_release/CasinoLoader/HOW TO.txt

SHA256 83a78f2ff043972dd05ca9f74d71af6eaba01b89bb66da8e83afb9783efd7600
MD5 029675a8f08658243521df95fa69bb74
SHA1 91c458af0cd4f0cda2ebe1791894296e5ada6b47
SHA512 d33577b79a83217d2f56454d25169690a6218f1297c3bb417b7a6a78150cbb801faf81d34fdb5173ff6a14959f8ab69a5827833eba743dcc4b49d281bb7b5291
TLSH
T1E3C0921F2684CB352AC45D49E813AC81378AAD1BB0802934FCB44D65A12682AC257CC1
MD5 SHA1 SHA512 TLSH

dexter_dk_release/CasinoLoader/config.php

SHA256 747914bdce798081fd58e932e0568ee044a92ea2ad6a3fda7e19cb957835c12d
MD5 eaf81593ee2da859030a0f6ecf717ef1
SHA1 f696e3d5277eb90be1da393033920a509dc96a71
SHA512 de2d2cd9be49d8d28d1e7d80a11a4bf01cf372e11333e42d74e63446aca9db356cbc7727f966dd4832ce3275663b0d383d3b1b1e7a80fe06ff25420e31fd5d93
TLSH
T189D02227C84185CAF3A820D04F310823C10640A3158265C0F501F28D8F21C85EC99882
MD5 SHA1 SHA512 TLSH

dexter_dk_release/CasinoLoader/gateway.php

SHA256 0a02a23956de8d744b0f38ab81ddb804e4ddbd3529c265547056612a2991111a
MD5 7b93115195db0c0b085a1107c4cc1aed
SHA1 918bff678fcda50004028db1c265e27de17f5647
SHA512 be976d25fc2c643c374e35e911dec52a0a3a6a4590847b10c8a8d2242d8ba54c5ff31a8f6835b909730d7e6d352a6b0fe80ffe4e6774d5e48d18c15ac3929240
SSDEEP 96:asiTxTr6uQTJRP/y6WABiLeexy4URhJXanWxyL9oKlD3YBYhDj0Spdzr:xRSLe95sN3Yo0yr
TLSH
T1CED1630291EE7D201AE77C70B64B45E286D9482C312481A93C4F39C85BE5BF476FC5E7
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/CasinoLoader/index.php

SHA256 11b370cf11948269e14fe2958e25a56eff0a7720a812ea1c1fa8f2085675abde
MD5 af44aa507c02f3c1aede5e251b28dc64
SHA1 bf96d27126aa9bd7ca9fc5a8499be33ff9365026
SHA512 7b704d66ca1a5b5550982837e077540670f985dafb63af7cc1df3eac4c2c0e890c83e9c50243b03907e4f28603b6b9e935c69c01acda1312853237db31ee918b
TLSH
T1613153D62301957110769DB5855C2AC2B744D50B1222ED553C72B31EBFF3E3A43BA5CB
MD5 SHA1 SHA512 TLSH

dexter_dk_release/CasinoLoader/info.php

SHA256 c2b8cd4da5d01595656c0ff3f2f017e34d4f77f940b6c282e5f1a07ff3316454
MD5 d8fa4356213b6ce9253f55acdff780ac
SHA1 22334347ab42748f85cd74b952eae63496764be7
SHA512 d46f32f5ed47641d00811116c1047bcc1557a75ab58a4f2e1fdb641e61bf9c124eb4a78fa63bbaa77c1ecd9890a909be0871d7e0d60bd2153245fda0857ef77f
TLSH
T1CB019EDC7C7FD41588EB98D9531E42469CD077046536E128BD9B818D06451E0A57D0ED
MD5 SHA1 SHA512 TLSH

dexter_dk_release/CasinoLoader/load.php

SHA256 185691f576c27104d4ee5e9f850d6b4a3d3b0a4ab402d52a1c74c9cfc0620ceb
MD5 0f95762562aa97c62d004949e7337e95
SHA1 a7d9c43c2395c22b7588cb792a4093d2ac5bd3a7
SHA512 1dab63f5e2bd3b4bdfdb7d7fc683ccc25919ed58725d312a8895bfa98033a3cd9f85af8dfe49f15ecdfb1835bcfd165c1671708361630c41681717ea69199484
TLSH
T1EE21C09E548F85008B54B9895E1C7B5C564FCB559306A3823DB331CC98E4F5C29D76CF
MD5 SHA1 SHA512 TLSH

dexter_dk_release/CasinoLoader/main.php

SHA256 7b551e31e87c73314069281ea5ccaa954d6ac94da31f0abc9a0f89e252bc135d
MD5 7812b7c1ed608299c9bece4f46607423
SHA1 1d7e546c0531b6492b361c19bdb69633fb8f93ce
SHA512 7fe236325be80490f4fe2a36f8c5955c52945fee436daad93dd89693d8dfc5d1a353d13324bcc2f01c3b3bd84831a92caf6eedddd15c2cde0442275c1ccc1041
TLSH
T1E9D0C24463C89C3E0B356E6C8330CA20926102829F413732A1D10C1F444CE448CF31D9
MD5 SHA1 SHA512 TLSH

dexter_dk_release/CasinoLoader/master.php

SHA256 88308a6bcc8f76fffd1c18c28213cd568fb0d63f2920ffb30f7504d5d89e7ee9
MD5 2b50c51fce89ddcfb769effdeab7080c
SHA1 c027bff71bf051731f2a1e0eefdd750d33f832f3
SHA512 79b2d8e0b6d6b0e687bb32a5d8a382b202e60f2c7bdc3c762e95f5c6bdb2ba6abfcf78917ee9783914e304ed6b961db52bbcf9e0fcb0cab87e9d51bd9771b9f5
TLSH
T11F3142B3A4FF0D3A93E67C75D2A51142ADDA0700A101934B7DBA79C2669D3E447BB3C8
MD5 SHA1 SHA512 TLSH

dexter_dk_release/CasinoLoader/nasproject.sql

SHA256 93c3c16a24abf76ec30eeb0af2b62d74e0028e25c7137b0237d75c65c931545d
MD5 e4fcfc8fe64364a9b7c68305b3aa70f9
SHA1 a667b1b8452605fcbfde6b9d0a8f6fcf710cbe22
SHA512 394102a837ae15fe3be2de6baa705b19a7d5db940296eb63e23098275b6f9cb1d4af2a237a007c63b1e69bf3bac55e20df842855acf528a7d38a0b8869a1f4ba
TLSH
T164519A0A3FB93E977586D9A2D1A03D03D9AD651E2D38E85240F270C8639779262FD06B
MD5 SHA1 SHA512 TLSH

dexter_dk_release/CasinoLoader/pagination.php

SHA256 ac47ea4abc28dbac37febe1b3cfd751cb0d9f0011977dd7f3f801b7a7afd80fc
MD5 1a8d91c12263dd5298a70c72976c5e97
SHA1 5970099d5c56b94827408f23143a79da6c8831de
SHA512 a327e265d09055fa86ec960518d0ca592b505d357928ea58bd5a161744030b15b20209a77e5e3a884ca7209ad4ab75b43e21055fd4d289a7f87a83e11773008c
SSDEEP 96:Z8MszIFO3VFcXMR2x9R59lypXl8FpF519qDpgpdN:ZbmP3D8R3lhvF514DpgpdN
TLSH
T11DD1A78177CA46399623B661717957B2CC7AD0747A8CACD87EDF21CBA78E534034E160
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/CasinoLoader/style.css

SHA256 1d6db3f786bfd8f15f0d8a243c3211bddb7a872f7da4e95aeae3d9ba6ac2dd92
MD5 92f234834a61b7fde898eea40f857bb3
SHA1 1592e206317bfe36b00fe0477b5dedea7d6ad9dd
SHA512 2815553f7c16ae2df8a8ea1e817bd203cd507d3a565f7d6e63bd3adc4a1d21326e57be3f639e5fcbb6efb21bb85ccf20d31327c72cee05f9afd305fdc59097d3
TLSH
T10FF0AFB3A65C6481D70760BFFD6896D233373252984BDE5A7EE489589A880A4636206C
MD5 SHA1 SHA512 TLSH

dexter_dk_release/CasinoLoader/upload.php

SHA256 fa0a44e6eed6c39bca2012caf3876c7a049d9b2f87abbc0bbc3e070dbcd54393
MD5 b2640cea86e5171662a082b6a043fcc2
SHA1 907a1b4331849fc91fc9a217f6aad6e9ef27b96b
SHA512 07faa00e0265ad7f958d61dee311e4fa173f7daa3697a8bae2ae38a6f3d6a01dd6487d96993e7d0cd5e6a3bc25f087d7a011e7ef0181fcbf581e209b41106850
TLSH
T1D2310265B0429EB88165EBF567140C00E2A5C36383056F183886B8BBD9B44A513FE6CC
MD5 SHA1 SHA512 TLSH

dexter_dk_release/CasinoLoader/viewer.php

SHA256 87313acb224c170bd1e2fc4d6a6384212f29b8544adbdcc101f8b58290e3b1e0
MD5 292b3b12c2f90c0e557bf599c2475c15
SHA1 4ee2fc9efeb08b552d85f482254cf8bacd7bbfed
SHA512 a29464ee1276253ca5d98ab40974e8204ff74df8e8956109b5bb3790b3717f026cdce46edf5539fa063b57b3dce369ebf0d992de41b864a6a818a0cc0bb043ff
TLSH
T11BC022EB9E0E4C3688761C780280CA001EF43A000700E61031CA108BA494A9C8C231A8
MD5 SHA1 SHA512 TLSH

dexter_dk_release/CasinoLoader/viewer_pagination.php

SHA256 87a102016d20ac726843c78b6e1b59cdbc276d34ef4461c9fbe794c8d5c356ff
MD5 60c7444a92daa115abfecc73c46fc2ec
SHA1 3d114e99a1ce1f5f8135494cba623a84eb43c1b9
SHA512 4ece5a696a63bf33503cd17ebe93d57593c513a0f12991501ae1a7119127455a4f3ac174a933f71f84555c5a30179a36fba3dde1a43a61286ce1178a5493108a
SSDEEP 96:Nls3FO3VFcXMR2x9R59lypXl8kDs6xqSgadC:NlX3D8R3lhkDs6cSgadC
TLSH
T1F1B1848233CF46795723B625747963B68C3DD0747E88ACD8BDDE01CAE78E520039E5A0
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/CRC32.c

SHA256 22c4ddcf0e8f67ddfaa94e9a4fc6852a45bf445d12de2aa4aa14fe52c8aa03a8
MD5 c874f35c73f985eb2714876bb4e6b4f1
SHA1 a28df3b8761b55c30565d58cbf62c67249409aa9
SHA512 0d1ca65395fd0dc6758ccaecba58204078cf6e1ff2debbe49a2cf3cd8fb48dccd32110a1d26634f6d38b1af39e76f0cdab2eb8cb88fc58c403e8968fe010cfe2
TLSH
T1636161C4324BA1321BB7B202313E1D802258C1503AF67EBC380F7025555B841BBAFDBB
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/CRC32.h

SHA256 081ef410a4199d68b343f8b5587ef946b9484d338125db018c8c0ecfe606febd
MD5 2e02d547cf52fc7df5497e3a6ce13522
SHA1 2d7de2cc15d377c3dae1710e3e14b775153ca611
SHA512 e3ce83061c5c5902d9b1a190fcece5509afb316b03aaa289a58a3d32a0ba434906ae512012983b4157ba64f4dc23cdabc01c78879af50d0f54eb81e00f9db036
TLSH
T1E3219CC8218698B61A3EE713A8295E48604A42053BE75EB9140BB098141B244A7DE86F
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/Config.h

SHA256 0c7356d7a18cc771f311112fb1dae9e1e4d89c76b3fe9674823f9ac5940f118c
MD5 c172247550960d5ed718c91d4b03c366
SHA1 b35380fae4a7a681e6450e8c42d1594fa32c4bf8
SHA512 e23d2bdc5dbc5e68dfe969517191ce47c389d24653b20b2fbae2427377d3b956883161c4d95ec28658ac709301152f889147916b32938ad2c486a480ce32a49e
TLSH
T187E0261D0DCB9D46A9609F48990A06AC8812683B456B4298294EFD581DAECDAE5E31EC
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/GetOSInfo.c

SHA256 aa57825aa5fff55a887b0321825c77653adae93633591e37cfc2e9ced184b9ea
MD5 5b0a07c4733c43c9ddd8ad648b184831
SHA1 4ff0f68de9da5e2d843d1c7c135fad65c81c9991
SHA512 0f0126943f753e66e073ed98f7f70af82e22e32a3ff24a90030477f2456d1ee2bb7e06b57010e85524fda515083bc10e904de74b02ca786443aecb1bd97ea2fb
SSDEEP 192:NEd76Z0wu2W9wmh7xVdv+Rc+hiVpXDCcodG:6dY0w49Ph7FGRc+hO5oo
TLSH
T1CDD125E6345FB1A09E9533824B395443CFE8C06019ABD258F8D97B482B20299677D6FF
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/Globals.h

SHA256 504d909b7fa67f361025e0484235ddbd2b7478594028e704affbb4812b261c0e
MD5 a672c058622d46c9719a902b62513f39
SHA1 299e10932baaa9d9eb2de5e5f67f3249d624ccd1
SHA512 d3fb64f76890ab1b74f1e3b76476042cfdbc400c92222fb9f85eb9a4aed736e421a056869344b9ffbfb3f2584bca3b09148fff421e4a267f77bb456a98d1052e
SSDEEP 96:o5s6GZT/Bb9+lGcEc2avGO/rYa8p5npOOz7xfigUneidA+ScuwSoSoT:0s66/B8rEczTupp5565eidAZcwoSoT
TLSH
T1E2B18533255B5466D981EBCCC30B242292D382213E32D2697B5E76841F179F3A1B9E7A
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/HttpInteract.c

SHA256 7e822302fa57de152357d13cf8e41e73c09b9747e563b739010506a5824d1a98
MD5 208dce84e279e1c3bd9ff186d6981621
SHA1 a7c69646937cd69898b0807acca3f339edfd0698
SHA512 c18d4cdad4a691ae53443052442c2bad9f8ffb629fe4dbe8143a209ba1bf2b464999803d4a4c82d8b9985d28b41876c665642076736b091fbd4b10b24cd27462
SSDEEP 192:uKukCJTlPgWsOD5PHWIw5rWIR376WP7vyJ921Fw4obi7qnipQ:uzplPlfJ9cFzh7qie
TLSH
T14AD1624E38EF04CAEB0326C59A760615CD9CB3042AD8935974357FF468B67B1A9623CF
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/Infect.c

SHA256 4212ab68352f6ea52ad4ab9473d028d81553c56aa0a7fab984aa34ee05f79dc9
MD5 32c19f357c6fa03a769063290653923c
SHA1 2f18c158a8211adf273849262b78738d2b389c1c
SHA512 7efd62f80d1a21b490b6f6e70a4bc82eef01c1c78e350411bf5b7fcb44c5839fe6857206b6b6105eb83dbc9201c2eb79efa16e1d89f73c677ab674a60a64530c
SSDEEP 96:ypTpavtd881nuZAC5GN4ca7sh5VPPw3JVzyWkkYaLpAaW:okLBuJ5jca7i5ZUmtkYaSaW
TLSH
T1F3C186839A975104AAF033324EB2C601FAF763ED26447951764FB6887490AEDD6372CE
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/InjectSection.c

SHA256 a0eb1a8970db27f076e4ae1aaf12447d1c6a80e95a6e1947e7cd927d42d211d2
MD5 389fba37218b437e762366ad97d6b359
SHA1 ba14b63e7b0ec05fc92d3e1959f7b22433297d18
SHA512 091fd3347cbc51da0d0fe1da8535b9f4f22016c504d730c3013238378ff4c3a8250691d78648962749c4e67882fb50ba9e1d099b5c73927d98fe4e039b2f07c7
TLSH
T1AE81978B518B188255B32A25E7A38103EEE6C17B1329D3153C6DC1E05FB90F8C572EAF
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/POSGrabber.c

SHA256 692261ec7c98620637cd7df295ec00c01a68c6978423019622e35aca0a65ea93
MD5 bb1b170d346f54e3120e50b4021a0c6f
SHA1 1ca97937bda732789a35c99cb85539765723b568
SHA512 9e823db6d6693e5ca15cc792cd8ca691f725f7ddd1a4d4fbb5b579461934c084ee6ddae2e97a102f1b500c0a51fd8482ba210be4aadb80cc76a1e5c5a6e8e5ea
SSDEEP 768:NG7+QAK/DkVMmj1nrOdPJjD1SC1QzeBp3iHga:g7NAaQtCPZPQasHV
TLSH
T111D2D882339F05596ED037DBA931601BCE6CD23167364174F45EF8EDA7640A862B12EF
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/POSGrabber.dsp

SHA256 4c64692c73f884803f3a1ee69180982dd547abd4e6da4a1d0f91c912b946bfb8
MD5 d00f3f53ce911256acaf5e8332a43f84
SHA1 2e4f8b96ac1903bc90d268c3742b709577f0ea57
SHA512 b5098da2a667649b4a7226bef4cdb7c3cd43db95d3043208b3ff9556f8c5396c086f76bc762bb76789d15793f423f3509bee3f231f22d4647b13256675b2515e
SSDEEP 96:ylaeQnzQeQeZQcfFQQNhNQ0wuTGT9QGNCNvXCqTPT3E2NbQbbQ0LBURxWWTSh:gQzQeQcQkFQaO9QTLNbQbbQKBURlTSh
TLSH
T1A691222BA041D718F3F63F5DBE4FCA28E4A5758A0A801B1DBD50D49E5E72B5B02812DF
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/POSGrabber.dsw

SHA256 dcd8cf2d7a343835af1a63cfb70cb85f583f06c0d039131590892e7751c29bd9
MD5 3c26b467efc608de61b5120b87f12be3
SHA1 5580bbf9a7533bf42fd78718e1a87e485923587b
SHA512 fdc331d8f2470ab4c9ef618e175bac2f0c777d62dc5af2e6a4c5008721213b9d640c4153f6d5fe42983ccab23a89d110515b68a6c5e917002974db2f9ab20ebc
TLSH
T1B2F086D463E75E25F7A16C1C30B0B4217E8DB0FABF4F4C58706C955A9141BC0D0066F9
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/POSGrabber.ncb

SHA256 8d8f51b9a7d378c2b68986246a6ec67b1d30567d470fc9d3ea92d976d3b91724
MD5 e24e1d874a0c01b4b72497f5e6b610dd
SHA1 cf9b67242eeecca63fbcb12f2710ebe7d49a880a
SHA512 40b8b4d69fdf16aa6c3404157683d39396a742dd79de1bd0c97cc02453d07e40bc4d40f92bd4b0343bfa68d320359c2004aa1f5413e8adcfd7c2e6e5411edc8f
SSDEEP 98304:Qqx2QpzsxgY97o0Tnitb34yFP4mUJ7L9DqMPRchAUo0gP4pz4cg90/:QqxCxR9PnitbFFPK7L5REAf/0/
TLSH
T142F6B557BF35AAE7D56E433A58731B1413A8D0CAB7A6AB231C0DBD246C021C19F9DBC1
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/POSGrabber.opt

SHA256 f941bec40d681e16122e6ad97cf754c7f45841449ff654cff7cfd56205455628
MD5 059dc7988f77d5a062df391dadbb1161
SHA1 8a9d8e04c8344b1cb83cfbb6b70c3c37b99d4009
SHA512 4435f7acc1569147fb2556752805ff83ce8089b3ca00cf17ef668bab2cfbfb7d7ffd4cf7226bfbd6e07a47ce2e52d45d22254813d3f2abf9544486118b1c07ee
SSDEEP 1536:K0VbD0VbN0Vbp0Vbd0VbG0Vbt0Vbv0VbMb:
TLSH
T124233157A186B609F1634135E0DB52165D30FC4227E0A828710CF3D5EFF66E29EB2A9F
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/POSGrabber.plg

SHA256 857f073437c34f1754be2aed8667c8d151ec44b62f13d14a42ce2cd6a30dd40a
MD5 27f0f3e55fb1d91a05131f6f18f36fdb
SHA1 06e41b02db492994ba910fc0d52a456b79496f02
SHA512 1ecca219ef53df2e553826512f98887b81698299c33a44a55c99134f851e08f16d81114da2b1f38c137e8fbac40c2554dc546e96a922ce2a50ba658624f463a1
TLSH
T1BF8111569987BB08E2A7D106F09F52169D70F80226D0A818714C83D9EFC75A19FB668F
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/POSGrabber.sdf

SHA256 0f9dac2827929689ef612f1c24e90aa958c48a9b188f6681b4a29d2c09625754
MD5 534eff2625a4003934d90cd4e1f27980
SHA1 831d3598677bcae76903fc54c59baa7d64e46d7d
SHA512 d707b7ae8bf0f83c15def575f9765ddc50149fdf777d2f887a1fba071d1fb0a7faf61f5522f5c8c72c2796b4ff20d892f98d3d0c659f94c53cb79ecc8ed34593
SSDEEP 196608:yJ0fUQzGvFUbhVWFmyU3Z6UB3BuDuxRdwx71I6Ssk5JaXRyaHt3:nUQAFUbhYFmyUrmuxRdoI8t
TLSH
T12F77E6D43E64DC03E4643879E1A52F34BB34B3574AA9870E13B425F93F617CB1A23A99
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/POSGrabber.sln

SHA256 d95c699cc01b835d51ad762f5d9ef66cb13e4bb148ae8b5a1861c8c258d3700c
MD5 02ee7e3464b28e4b476bcd3366fd8d84
SHA1 f6b0c743aae03258a5c63307c25ef71a17246e82
SHA512 deec55baca0c453baf695e2201dcfe24b4d7ed020781522d5d524464a435c1ab6b44288b41fe903ffea5cb8d5910dcdfd4bd8ed6cd2dd34bea440212a83a80a6
TLSH
T1F7115CB8301F7BD53585663FC5F55DBABD375BA0E54C093C08A89888AF33601D15B587
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/POSGrabber.suo

SHA256 aa2dece62849537b8f7a5d101ed63138d6e2579df864ce84809af9145d0cc9c6
MD5 f0f81b8fe23450bd73c7c6346691445b
SHA1 1ccbe6a0e1e1f8c433ee6852fb01433501393be3
SHA512 1a34a20a3ecc0d963683ccc85ca3090763911021d44eaf23c2b0f4ba1cf70c88fad78e258a865f8345c1733da26b68fa0213501f8e39462165cc50c168c68bc6
SSDEEP 384:UnhIyHYSdDie4MpgDNpE5De0AdghvZl7:nATdDb61ghB
TLSH
T149C2FE5137E89209F3F76F751AB6C2D94A29FC66BD4AC21E31A8734D0C31A04DA60B77
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/POSGrabber.vcproj

SHA256 980e75af71ace8dfb8cefd94103862d7078d833b1ad99841346b2fae6e96d3dc
MD5 5803e6c1093480a0688e1bc8ba3f6f79
SHA1 291267f33a2a218b72fcb2197d4c52145f620ee8
SHA512 74262429148b92dee2b33db6f5f2a230e2b079ae39b786c74b7c48591dea04ce2d0b3c12a49a1f85efbab1ebbea74721c634b707a49b103f32e08b63a72f266a
SSDEEP 192:K7aEqgsKc4T6Ugg0UEEqb5tmQFw5igw5iHw5iww5ii:3J9O07Z5tmyw5igw5iHw5iww5ii
TLSH
T101E18B94331C3ED692D083536DF504C83A6EDEBD020D41FFE56AB5B6A5CF8A92322671
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/POSGrabber.vcproj.MORPHEUS-A01DE5.Administrator.user

SHA256 c688a2895ff6aabeb3fbf0987e84d51f3ac8af8440d03c918e6b9eba766faeee
MD5 6260908f66fd6bc6070650ca5fbe2a5a
SHA1 eadf6405131afc38eeb2722d005daa9471ff3b01
SHA512 edf12e6acac362f5d139226d4b4798a1cbf027eb8525b308452b3573c1b23e92ce62280450751be3a929fa02ae53e83414a2b7f4988dab1ddb9d386622761632
TLSH
T161212B8DB2FC2DE6A3681247D1B88ED146FDC345052C68D9F83F3D963E2A9994188792
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/UpgradeLog.XML

SHA256 4d09e065928d23da9de59b9b74ba832eb7a33dfe01db2b9574d40679036fe450
MD5 5be2a15a77744535ef0c83b754658809
SHA1 3f6587c59fd76aeac202cde8eb4353291855c1a5
SHA512 d6b90de26a7538654c0d8f87b71961640235840d39f72d2e9728b7a6e70c972f59c44903553df21b977417a72e0af1d7a170ee9314bd7b3c4f7f425145d00feb
TLSH
T142F081648685AD2EC5F14B15C1BD3054ED1EB6F102780219BBB37B8708D99084456777
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/_UpgradeReport_Files/UpgradeReport.css

SHA256 97b4ca75b7492ddc5bf343c2b68d75f644660589fa3a58678e2035c0c1f2cd6a
MD5 bf2403ea7bed7e15c6520fba22267042
SHA1 e8ed2f4dee998ed74a8864765faea7cd8ce75cd7
SHA512 3a42255c16666ea2a6b022c7923ea066dd525acf7a7bc7f16ea8395f65a079a4c035658bec75fe473d78bf439f8642c95f7721a87c25113fea72f4838ba4c41d
TLSH
T16461B39FD61783C79F2DA8E0A67E36993FB075925D5C9FB01F54F0AAD250A5C00209F1
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/_UpgradeReport_Files/UpgradeReport.xslt

SHA256 6de2949bbba34ea94bd5967a14b151f64ef7fcb86e6c73f23afb1276eda71c00
MD5 6d5cbd507c9d8d38da09b7aaa2715f98
SHA1 b61c0fac6db48218c6a7319cce394a8e0bc7bd7d
SHA512 43697b082ec1c557ac41c49945caf33f3110d001d9fde714fcd48630278bc0cc15f45c1b2014c3d4d076bebc628950f157e2dcc1b2dee26e3416e0956c770e54
SSDEEP 192:60gXSh2JLNFPW3/U0KbNSDTjxba/Ez0c2j/qGuY1j:60giU/Fe380aYDTjxMEzf2Lj
TLSH
T14742EFB6A4C0DF278FB7205ECA51A954FF21819B81342895F4ADE3371FB9C08856376B
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/_UpgradeReport_Files/UpgradeReport_Minus.gif

SHA256 f1a526b6ca29d3f8f6961ad375846326581e24c732751de5abc7be2440d05da4
MD5 96d649718f4173b0ee98438d4ebaa828
SHA1 c95aac78aef101b47ae1187e63a485a0c1394ed1
SHA512 237bc8ad3d31c2570f0a39701c5517e99b1d485c39563a7349ec8392ddcfdd5c3b08327230af92535427e6778cdae204e1e471f932da8052a2c32327cbbf0e7e
TLSH
T1FAA02200BC0C20C0C82AC23F0C0C03382FECC082038CA3082332300CA00C0A00003C00
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/_UpgradeReport_Files/UpgradeReport_Plus.gif

SHA256 46300af819a0fbde343e15d9f82dda62ce09a942927762fcf8a1c6a97d869610
MD5 18c6542472c7fdadad28c611a0f2fca9
SHA1 62c605d882d113aa7713c319e639dae26a5d69a9
SHA512 b3d0befd7014a10af72fc443932f6f442151b49060cc0757b32cfb420c3b81e2d86a5c5549147d387c3f0829febb574a9d94e9859102929a8ee68b886c594c22
TLSH
T1F7A00231FC5D5558CE2D953F0E4D4779BFE8CC41116D66045B36351CDC892E02507625
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/common.c

SHA256 d2d01c58fb6893c6cf544e2d9fcda6e2760dbf8bd640abaf09e00d768eddd50f
MD5 299fccadc9c286f1eb7c88dacbb2c6c8
SHA1 fbf8943674af1098936420a9bbab20d007d0c695
SHA512 4d8a2d22d7177fddf90d22317539c6b83d263b352319aa3b788adf5ffd80d49b0a36f0f310cfb7b251c99e636737bf93c439da2f2a72c7905efe7554477af307
SSDEEP 96:Z0kD2vAPa5lvXpbkjSdtLeK0TPCOb4022E4/sSsMq4u+F3giRNX/6jq72rd/yL:92oPa5lQKeX7Lb40F/RiTiRhQq7aZyL
TLSH
T1F4D1F9C1B1CB10616F753BA647BB1006D9599021327FAB70F89482647E924B753B39BD
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/ipch/posgrabber-c4fc44f0/posgrabber-66fc4c6d.ipch

SHA256 6d9614037802ddcac4a1a16361bc5afbb6f9cf630e88ace00e390a147fd07320
MD5 892a212cf92eb2289b28eeebbff58fd3
SHA1 6797c8c5dacb768f5705499779b1bb9f9c234d55
SHA512 bf93979194be1f1f1889c616db9e90c2e4f42e4ca93f7f0ac903f3af77d47136bd946521dac28ef457e434743e4b503cbd1173d383aa719f3ca38fb2048aaa25
SSDEEP 393216:ob0DV2nNxAuV/k71/Y9sYcxprPyxysC0IiEBoHFKRlWnkr:oTAiEpD
TLSH
T1E2775C06EF015D56D45942302CEB27953330FBAB93C1D35F6688A57CAC9778F2FA9288
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/posgrabber.vcxproj

SHA256 fa860920f2dad90f15209ad3f9599c1666464856e8832a5658741f7e8a00ebcb
MD5 8c0502cc0adcb03ca9059ead792a3845
SHA1 7814a9fec6e305c5aafe3176da09a90862880b50
SHA512 99ee6189d1f15a1d4a17d614a5803a4acdef02087a1cfccafecb7a1250f1c37743162d71635aec9c5e66f72c0b534683961ab53fa8c0f0d7ac0db23d44b7a4bf
SSDEEP 96:i0/z2VfNOTFLeyaLbyaLDmPOVSARgAtOmobSN:z/z67
TLSH
T100A1AB64E5D86D4D92BA412BE6E38840EF3193C308554C99FA9FD34B5FB39487213B32
MD5 SHA1 SHA512 SSDEEP TLSH

dexter_dk_release/POSGrabber/posgrabber.vcxproj.filters

SHA256 58f1b7867ecd91dcac44b95b07f14893bb38f4c4c8c1c7318641f1d4b9d30288
MD5 fe83149616fd652128af50e4ff453f1b
SHA1 f354767504ebc75efbab641b646ba42f9483ddb2
SHA512 1e4f14b23419ee7c508193967343ac6ebc00bfdf62722963e121995d3b509ecbfec0cf9c34dc6c643272d7d8bac9c8953b6e20b3136da5b7132c27678462c3e0
TLSH
T10941BC30C4DD6F4C2133555BFB94ED05EFA8B2E3218501497AA9E08B6FF3258D227A78
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/posgrabber.vcxproj.user

SHA256 f2f2e1ebb09bb88b3bc3f57677a31e0ae1b50cad9d5826e00d6b2fcff887974f
MD5 02816bcc1da4abf7ab716035d355eb7c
SHA1 43e826c5dfe10c024f4825d5b2205f1690c6f495
SHA512 44158ec480c70eee35f66bd878b17904847e7a1bc49cd23761bf087b5a56bae4ded164bf730559b8c554e69ee515ba6d561c9cd77b4eabe88f0fef412cb67a44
TLSH
T123C02B409100E831BBA05E3483A8CC78F3F633F314F080FCD4C0C40C21061A81020393
MD5 SHA1 SHA512 TLSH

dexter_dk_release/POSGrabber/remotescript.c

SHA256 aaec740974243650e109ad47ee6044065b93d7aad5d50ac5ec83985a8477f607
MD5 16e5c6be3c8c4129aabe4a2dec7d046a
SHA1 a430d006b0afc3ed0acf6588f4d8d79a36c5a1bf
SHA512 abcc8c205698fc22c52e4d1bb01e69b496ccdc1d0ae37c64f1cb35ca09135df466f74df9feb9bdec324860461d83030ae451c1fe0d862e5d0f1d2362f6cf9050
SSDEEP 96:yFnXW4A8jBpD+W8zj6T4VW/ibPEpjFU/ja/OX0eXstbQbvCojOTIovXWj:EduW8zw9ibPEp2anwRMP8
TLSH
T168D1B5CB38EF51E29ED02156963A51028CDB520F052C43B270ADF9CDAB794DC526E2CF
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

Dexter.zip

dexter_dk_release/CasinoLoader/HOW TO.txt

dexter_dk_release/CasinoLoader/config.php

dexter_dk_release/CasinoLoader/gateway.php

dexter_dk_release/CasinoLoader/index.php

dexter_dk_release/CasinoLoader/info.php

dexter_dk_release/CasinoLoader/load.php

dexter_dk_release/CasinoLoader/main.php

dexter_dk_release/CasinoLoader/master.php

dexter_dk_release/CasinoLoader/nasproject.sql

dexter_dk_release/CasinoLoader/pagination.php

dexter_dk_release/CasinoLoader/style.css

dexter_dk_release/CasinoLoader/upload.php

dexter_dk_release/CasinoLoader/viewer.php

dexter_dk_release/CasinoLoader/viewer_pagination.php

dexter_dk_release/POSGrabber/CRC32.c

dexter_dk_release/POSGrabber/CRC32.h

dexter_dk_release/POSGrabber/Config.h

dexter_dk_release/POSGrabber/GetOSInfo.c

dexter_dk_release/POSGrabber/Globals.h

dexter_dk_release/POSGrabber/HttpInteract.c

dexter_dk_release/POSGrabber/Infect.c

dexter_dk_release/POSGrabber/InjectSection.c

dexter_dk_release/POSGrabber/POSGrabber.c

dexter_dk_release/POSGrabber/POSGrabber.dsp

dexter_dk_release/POSGrabber/POSGrabber.dsw

dexter_dk_release/POSGrabber/POSGrabber.ncb

dexter_dk_release/POSGrabber/POSGrabber.opt

dexter_dk_release/POSGrabber/POSGrabber.plg

dexter_dk_release/POSGrabber/POSGrabber.sdf

dexter_dk_release/POSGrabber/POSGrabber.sln

dexter_dk_release/POSGrabber/POSGrabber.suo

dexter_dk_release/POSGrabber/POSGrabber.vcproj

dexter_dk_release/POSGrabber/POSGrabber.vcproj.MORPHEUS-A01DE5.Administrator.user

dexter_dk_release/POSGrabber/UpgradeLog.XML

dexter_dk_release/POSGrabber/_UpgradeReport_Files/UpgradeReport.css

dexter_dk_release/POSGrabber/_UpgradeReport_Files/UpgradeReport.xslt

dexter_dk_release/POSGrabber/_UpgradeReport_Files/UpgradeReport_Minus.gif

dexter_dk_release/POSGrabber/_UpgradeReport_Files/UpgradeReport_Plus.gif

dexter_dk_release/POSGrabber/common.c

dexter_dk_release/POSGrabber/ipch/posgrabber-c4fc44f0/posgrabber-66fc4c6d.ipch

dexter_dk_release/POSGrabber/posgrabber.vcxproj

dexter_dk_release/POSGrabber/posgrabber.vcxproj.filters

dexter_dk_release/POSGrabber/posgrabber.vcxproj.user

dexter_dk_release/POSGrabber/remotescript.c