General
- Target file
- Size 17KB
- Sample201109-th3b611dys
- SHA256 0f9f2ed3669af8502dfad754d0dc2e7682fe7bc4d0044f7cc3ca61a0e1170d15
- MD5 0b660bffa6e0093bf7054a8d80071585
- SHA1 6450139c6698b3cfb67cf9f06a0b3190c44442af
- SHA512 09fb8bbe5d013fa01ba5cd50595a2d273411a71344ba3e9af7864dbad185c88844c128b023f85368c1718c05e9799f46d2af11dc0665c14c4c30dfd161537f48
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
revengerat
Botnet
-
Guest
C2
-
memo445.ddns.net:1337
Mutex
-
RV_MUTEX
Targets
-
- Target file
- Size 17KB
- SHA256 0f9f2ed3669af8502dfad754d0dc2e7682fe7bc4d0044f7cc3ca61a0e1170d15
- MD5 0b660bffa6e0093bf7054a8d80071585
- SHA1 6450139c6698b3cfb67cf9f06a0b3190c44442af
- SHA512 09fb8bbe5d013fa01ba5cd50595a2d273411a71344ba3e9af7864dbad185c88844c128b023f85368c1718c05e9799f46d2af11dc0665c14c4c30dfd161537f48
- MD5 SHA1 SHA512
Score7/10-
Drops startup file
-
Uses the VBS compiler for execution