General
-
Target
NEAS.75e10091f85746236b13d3942516be60.exe
-
Size
901KB
-
Sample
231103-jy3q6sec4w
-
MD5
75e10091f85746236b13d3942516be60
-
SHA1
079d7479f16b7c3cd84abe158a8e05ef6b77539d
-
SHA256
fd211fca40da3299ec27ad50f51b5955909a94daa883e8c84c01ae74da2e7652
-
SHA512
960c7d08ad75ba60c3d314e0f05cbe5900d6148fce32cdd3731e8c0debd08915b6c54c3e389e70c9c8f02c9d5627c4746cefafdb767a1b9b2246c14fa5a7ea73
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5H:gh+ZkldoPK8YaKGH
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.75e10091f85746236b13d3942516be60.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.75e10091f85746236b13d3942516be60.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
NEAS.75e10091f85746236b13d3942516be60.exe
-
Size
901KB
-
MD5
75e10091f85746236b13d3942516be60
-
SHA1
079d7479f16b7c3cd84abe158a8e05ef6b77539d
-
SHA256
fd211fca40da3299ec27ad50f51b5955909a94daa883e8c84c01ae74da2e7652
-
SHA512
960c7d08ad75ba60c3d314e0f05cbe5900d6148fce32cdd3731e8c0debd08915b6c54c3e389e70c9c8f02c9d5627c4746cefafdb767a1b9b2246c14fa5a7ea73
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5H:gh+ZkldoPK8YaKGH
Score10/10-
RevengeRat Executable
-
Drops startup file
-
Suspicious use of SetThreadContext
-