General
-
Target
705cc549b8b86b9d33998ca487124216669463cfbb988afc9b3b569b17232e94
-
Size
904KB
-
Sample
240726-266f5s1bnn
-
MD5
dd395fc7fd6cbe0581fcd536926ee599
-
SHA1
4c00b33cacc3440739905e40f260a5153a9b2238
-
SHA256
705cc549b8b86b9d33998ca487124216669463cfbb988afc9b3b569b17232e94
-
SHA512
ca8ee74e10de0df0b8f797c1394b91b4c1f4fc2a2dbed56a4964d2271e6f8e53e5e2be26ed75e965739a72916760acf7aa62f9c8a8e21b6b1fb5af316547ce31
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5B:gh+ZkldoPK8YaKGB
Static task
static1
Behavioral task
behavioral1
Sample
705cc549b8b86b9d33998ca487124216669463cfbb988afc9b3b569b17232e94.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
705cc549b8b86b9d33998ca487124216669463cfbb988afc9b3b569b17232e94.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
705cc549b8b86b9d33998ca487124216669463cfbb988afc9b3b569b17232e94
-
Size
904KB
-
MD5
dd395fc7fd6cbe0581fcd536926ee599
-
SHA1
4c00b33cacc3440739905e40f260a5153a9b2238
-
SHA256
705cc549b8b86b9d33998ca487124216669463cfbb988afc9b3b569b17232e94
-
SHA512
ca8ee74e10de0df0b8f797c1394b91b4c1f4fc2a2dbed56a4964d2271e6f8e53e5e2be26ed75e965739a72916760acf7aa62f9c8a8e21b6b1fb5af316547ce31
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5B:gh+ZkldoPK8YaKGB
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-