General
-
Target
6c1de6e48404bcbd85789b345e4ef33b49812257e47c7801b7905772feb4e70a
-
Size
903KB
-
Sample
240320-y62amsbb4x
-
MD5
419ff6deb03c54c139ffb5eaad64614a
-
SHA1
9817fc27a4c71744b16fe261c3930fe8158b84dc
-
SHA256
6c1de6e48404bcbd85789b345e4ef33b49812257e47c7801b7905772feb4e70a
-
SHA512
b85b5388b4c9251c3eaf985481ca01131b1bd2043647c63f03f6d50bf9862f8ac29455c18dfddd484bc068deeb63ac9981c98bd38a2bc83013d834e86b2e1ac6
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5r:gh+ZkldoPK8YaKGr
Static task
static1
Behavioral task
behavioral1
Sample
6c1de6e48404bcbd85789b345e4ef33b49812257e47c7801b7905772feb4e70a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6c1de6e48404bcbd85789b345e4ef33b49812257e47c7801b7905772feb4e70a.exe
Resource
win10v2004-20240319-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
6c1de6e48404bcbd85789b345e4ef33b49812257e47c7801b7905772feb4e70a
-
Size
903KB
-
MD5
419ff6deb03c54c139ffb5eaad64614a
-
SHA1
9817fc27a4c71744b16fe261c3930fe8158b84dc
-
SHA256
6c1de6e48404bcbd85789b345e4ef33b49812257e47c7801b7905772feb4e70a
-
SHA512
b85b5388b4c9251c3eaf985481ca01131b1bd2043647c63f03f6d50bf9862f8ac29455c18dfddd484bc068deeb63ac9981c98bd38a2bc83013d834e86b2e1ac6
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5r:gh+ZkldoPK8YaKGr
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-