General
-
Target
5d8f69dea8cdbcac40ba9a4b2ece2e20N.exe
-
Size
952KB
-
Sample
240726-1vn72szhme
-
MD5
5d8f69dea8cdbcac40ba9a4b2ece2e20
-
SHA1
9d7c879939d219a4e9d1a95eb003743615ae274a
-
SHA256
8e886c325e8008c4eef43c96f0e09eee01c0e10937e57f926432d499ed445ad6
-
SHA512
d0b08132eda6582dbd3a353af562145fe24f84d1fb528a61192d62b568563bda65eaae89c7dd9718910956b59b2242227752195be813e01992951ff6a4375528
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5A:Rh+ZkldDPK8YaKjA
Static task
static1
Behavioral task
behavioral1
Sample
5d8f69dea8cdbcac40ba9a4b2ece2e20N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d8f69dea8cdbcac40ba9a4b2ece2e20N.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
5d8f69dea8cdbcac40ba9a4b2ece2e20N.exe
-
Size
952KB
-
MD5
5d8f69dea8cdbcac40ba9a4b2ece2e20
-
SHA1
9d7c879939d219a4e9d1a95eb003743615ae274a
-
SHA256
8e886c325e8008c4eef43c96f0e09eee01c0e10937e57f926432d499ed445ad6
-
SHA512
d0b08132eda6582dbd3a353af562145fe24f84d1fb528a61192d62b568563bda65eaae89c7dd9718910956b59b2242227752195be813e01992951ff6a4375528
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5A:Rh+ZkldDPK8YaKjA
Score10/10-
Drops startup file
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-