General
-
Target
eb1a14bb4211201bd9b0562c78cc68f725439d3456008f5d545ca9d29d18309d
-
Size
903KB
-
Sample
240321-axgmwafd49
-
MD5
49e14535d60871b07408423216a664a0
-
SHA1
bddf8e2772416581965ad822b867c9b560c44460
-
SHA256
eb1a14bb4211201bd9b0562c78cc68f725439d3456008f5d545ca9d29d18309d
-
SHA512
ee4cbb25c35291f0ecaefd654398640a5377b222a959658064ad66bd9367c44e49f8cc664d5b56d26483e9c91963506a5e0956d756b64445c1cf1bdae614bb2a
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa50:gh+ZkldoPK8YaKG0
Static task
static1
Behavioral task
behavioral1
Sample
eb1a14bb4211201bd9b0562c78cc68f725439d3456008f5d545ca9d29d18309d.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
eb1a14bb4211201bd9b0562c78cc68f725439d3456008f5d545ca9d29d18309d.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
eb1a14bb4211201bd9b0562c78cc68f725439d3456008f5d545ca9d29d18309d
-
Size
903KB
-
MD5
49e14535d60871b07408423216a664a0
-
SHA1
bddf8e2772416581965ad822b867c9b560c44460
-
SHA256
eb1a14bb4211201bd9b0562c78cc68f725439d3456008f5d545ca9d29d18309d
-
SHA512
ee4cbb25c35291f0ecaefd654398640a5377b222a959658064ad66bd9367c44e49f8cc664d5b56d26483e9c91963506a5e0956d756b64445c1cf1bdae614bb2a
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa50:gh+ZkldoPK8YaKG0
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-