General
-
Target
e2af4fd9de97d43d58095e3978e81f8efca3e41bec4521c894357f2ba4181903.bin
-
Size
3.2MB
-
Sample
230424-ls6xracg4s
-
MD5
e2bb59e51e035c20f221cc8f5a02bb83
-
SHA1
d5a6dd4c4f6c66b2a1673ee3d921613fb72f68a8
-
SHA256
e2af4fd9de97d43d58095e3978e81f8efca3e41bec4521c894357f2ba4181903
-
SHA512
ebd6770c0d4979978bd9babf092c968f85e1615cb372ddbcc38034c5a4382401d126b2b8e9dfd59f6a1ba5677b33fd26818f0d08f5920cdd878a55ae0563895b
-
SSDEEP
98304:3viz/27qWGq/TzuqCDl2Ptao7jOqJDz5nN3:3viq75/Tzuf9ADZN3
Static task
static1
Behavioral task
behavioral1
Sample
e2af4fd9de97d43d58095e3978e81f8efca3e41bec4521c894357f2ba4181903.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e2af4fd9de97d43d58095e3978e81f8efca3e41bec4521c894357f2ba4181903.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
revengerat
NyanCatRevenge
b2b.ddns.com.br:5222
d9261ef3301b4b86a95
Targets
-
-
Target
e2af4fd9de97d43d58095e3978e81f8efca3e41bec4521c894357f2ba4181903.bin
-
Size
3.2MB
-
MD5
e2bb59e51e035c20f221cc8f5a02bb83
-
SHA1
d5a6dd4c4f6c66b2a1673ee3d921613fb72f68a8
-
SHA256
e2af4fd9de97d43d58095e3978e81f8efca3e41bec4521c894357f2ba4181903
-
SHA512
ebd6770c0d4979978bd9babf092c968f85e1615cb372ddbcc38034c5a4382401d126b2b8e9dfd59f6a1ba5677b33fd26818f0d08f5920cdd878a55ae0563895b
-
SSDEEP
98304:3viz/27qWGq/TzuqCDl2Ptao7jOqJDz5nN3:3viq75/Tzuf9ADZN3
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-