General
-
Target
5a7690d8325dd2bd70f11bd93377eb03139c7b2d3697d6b7da445658116b20a9
-
Size
951KB
-
Sample
240630-1qd7aawgme
-
MD5
b20970e1ada05c21a8076fecb5c2a73c
-
SHA1
7c1122231270d5ee50036ea143853df3d4205f45
-
SHA256
5a7690d8325dd2bd70f11bd93377eb03139c7b2d3697d6b7da445658116b20a9
-
SHA512
89d9697490666fedfb8df5e0afbed2cb7235ad39aebd0df85f021f8a083f6ffd6cf48fa8b7d8e3d34058273a51c52e98346150b7af6dabe4568ff235d0ee2b56
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5G:Rh+ZkldDPK8YaKjG
Static task
static1
Behavioral task
behavioral1
Sample
5a7690d8325dd2bd70f11bd93377eb03139c7b2d3697d6b7da445658116b20a9.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5a7690d8325dd2bd70f11bd93377eb03139c7b2d3697d6b7da445658116b20a9.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
5a7690d8325dd2bd70f11bd93377eb03139c7b2d3697d6b7da445658116b20a9
-
Size
951KB
-
MD5
b20970e1ada05c21a8076fecb5c2a73c
-
SHA1
7c1122231270d5ee50036ea143853df3d4205f45
-
SHA256
5a7690d8325dd2bd70f11bd93377eb03139c7b2d3697d6b7da445658116b20a9
-
SHA512
89d9697490666fedfb8df5e0afbed2cb7235ad39aebd0df85f021f8a083f6ffd6cf48fa8b7d8e3d34058273a51c52e98346150b7af6dabe4568ff235d0ee2b56
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5G:Rh+ZkldDPK8YaKjG
Score10/10-
Drops startup file
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-