General
-
Target
96b36207f0e83873398924b0bb649db0N.exe
-
Size
952KB
-
Sample
240807-ktl4asygqg
-
MD5
96b36207f0e83873398924b0bb649db0
-
SHA1
8deb4c6b78bd11c45376c97ac794e7f80038143b
-
SHA256
f83bd453ff05a801027597c098a215731891c1b55eb63ea6b4e426d51df2ea0b
-
SHA512
2a8bbd26477206176bcac855e199a8afc311bd0ebdc89deaefdc9721377a158cfed214a3833806bd042796e7470de7369cb39c9d0d97f630a78c99c72d77cba8
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5r:Rh+ZkldDPK8YaKjr
Static task
static1
Behavioral task
behavioral1
Sample
96b36207f0e83873398924b0bb649db0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
96b36207f0e83873398924b0bb649db0N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
96b36207f0e83873398924b0bb649db0N.exe
-
Size
952KB
-
MD5
96b36207f0e83873398924b0bb649db0
-
SHA1
8deb4c6b78bd11c45376c97ac794e7f80038143b
-
SHA256
f83bd453ff05a801027597c098a215731891c1b55eb63ea6b4e426d51df2ea0b
-
SHA512
2a8bbd26477206176bcac855e199a8afc311bd0ebdc89deaefdc9721377a158cfed214a3833806bd042796e7470de7369cb39c9d0d97f630a78c99c72d77cba8
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5r:Rh+ZkldDPK8YaKjr
Score10/10-
Drops startup file
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-