Extracted

• • Target

    e2b0c5d95f9948b45b28b909ec716fe8df305d2b63d6b8e433aee3279929b32d

  • Size

    365KB

  • MD5

    def2219991114fbac93aca787579946c

  • SHA1

    e2c877782f16b786db3d569895a23fe9920e2ad4

  • SHA256

    e2b0c5d95f9948b45b28b909ec716fe8df305d2b63d6b8e433aee3279929b32d

  • SHA512

    1f5252c63ed6959b96fcc10863dee2f39ef949f2d18905f821fb429d5e471345b7564bd0bccdee22eeefdcced3a883bd0b5bc9e29bbabb2442a17ebdd4793109

  Score

  10^/10

  suricata

  • suricata: ET MALWARE WebMonitor/RevCode RAT CnC Domain in DNS Lookup

    suricata: ET MALWARE WebMonitor/RevCode RAT CnC Domain in DNS Lookup

    suricata

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  behavioral1behavioral2