General
- Target 2300-11-0x0000000000400000-0x0000000000418000-memory.dmp
- Size 96KB
- Sample240725-b416ja1ann
- SHA256 3315a8cf8d84f3c0c7ddc6569a056e794a5ccb49def141f5534a7fe1d3a333bf
- MD5 10baae4b40575f49bf86e62dd196de5c
- SHA1 70e5a98f3f99397b5276f96416534d6cd220bf28
- SHA512 59268e2f185a86f3aad294f58b291d7afc8e86f7f4e4789d7646a234bc39d72c6d2e8cc969f613ae63fada6f62a8486727cf303a808a2116f7fcf4966d29782d
- SSDEEP 384:1GILRi9TWasvRPJnMIrOi+pDOO5MrsVKApyjsvstn4VcN0:1GIcTWdr+9OxciCY4mN
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2300-11-0x0000000000400000-0x0000000000418000-memory.exe
Resource
win7-20240708-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2300-11-0x0000000000400000-0x0000000000418000-memory.exe
Resource
win10v2004-20240709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
revengerat
Botnet
-
MAYO24
C2
-
karmina113.sytes.net:3333
-
karmina117.sytes.net:3333
-
karmina118.sytes.net:3333
-
karmina119.sytes.net:3333
-
nibiru3.duckdns.org:3333
-
nibiru4.duckdns.org:3333
-
nibiru5.duckdns.org:3333
-
nibiru6.duckdns.org:3333
Mutex
-
WSCollect
Targets
-
- Target 2300-11-0x0000000000400000-0x0000000000418000-memory.dmp
- Size 96KB
- SHA256 3315a8cf8d84f3c0c7ddc6569a056e794a5ccb49def141f5534a7fe1d3a333bf
- MD5 10baae4b40575f49bf86e62dd196de5c
- SHA1 70e5a98f3f99397b5276f96416534d6cd220bf28
- SHA512 59268e2f185a86f3aad294f58b291d7afc8e86f7f4e4789d7646a234bc39d72c6d2e8cc969f613ae63fada6f62a8486727cf303a808a2116f7fcf4966d29782d
- SSDEEP 384:1GILRi9TWasvRPJnMIrOi+pDOO5MrsVKApyjsvstn4VcN0:1GIcTWdr+9OxciCY4mN
- MD5 SHA1 SHA512 SSDEEP
Score1/10