General
-
Target
04067f912bbaea3a9b77689104eadb60.exe
-
Size
951KB
-
Sample
240705-zh94bavgkp
-
MD5
04067f912bbaea3a9b77689104eadb60
-
SHA1
1feeffa69a1b2188e66a81042db708e394487fa8
-
SHA256
3669582633973cf621d34f328b3e365fdf49afc33c66d4d306093534600eda89
-
SHA512
6f9581f1d7dab34755b18263243592c5557b1f8a8850a6322e221dc0b0b7b8581ad5c9ce6f4393ceb0d738cb7e56fc84d03ea622c44ab2a68c41d0197b66b595
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5H:Rh+ZkldDPK8YaKjH
Static task
static1
Behavioral task
behavioral1
Sample
04067f912bbaea3a9b77689104eadb60.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04067f912bbaea3a9b77689104eadb60.exe
Resource
win10v2004-20240704-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
04067f912bbaea3a9b77689104eadb60.exe
-
Size
951KB
-
MD5
04067f912bbaea3a9b77689104eadb60
-
SHA1
1feeffa69a1b2188e66a81042db708e394487fa8
-
SHA256
3669582633973cf621d34f328b3e365fdf49afc33c66d4d306093534600eda89
-
SHA512
6f9581f1d7dab34755b18263243592c5557b1f8a8850a6322e221dc0b0b7b8581ad5c9ce6f4393ceb0d738cb7e56fc84d03ea622c44ab2a68c41d0197b66b595
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5H:Rh+ZkldDPK8YaKjH
Score10/10-
Drops startup file
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-