General
-
Target
dc9f9ea5a8dc888825beff4a93f9b4909d4f55b83d1bb19360aec3e5aa53568d
-
Size
903KB
-
Sample
240817-graeya1alg
-
MD5
ae83bfc2f6148d415179d7d37ee7c704
-
SHA1
a1362d21cb6f823709453a18ec37839e247d73a8
-
SHA256
dc9f9ea5a8dc888825beff4a93f9b4909d4f55b83d1bb19360aec3e5aa53568d
-
SHA512
92444ffd4e65986a9aae10faa34ef83d1d265187c9174de4ebe366dd2b0124bc3096400204c2b1b875433d8b578a79139793cc971daaa609da07d8a088ae68b5
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5V:gh+ZkldoPK8YaKGV
Static task
static1
Behavioral task
behavioral1
Sample
dc9f9ea5a8dc888825beff4a93f9b4909d4f55b83d1bb19360aec3e5aa53568d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
dc9f9ea5a8dc888825beff4a93f9b4909d4f55b83d1bb19360aec3e5aa53568d.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
dc9f9ea5a8dc888825beff4a93f9b4909d4f55b83d1bb19360aec3e5aa53568d
-
Size
903KB
-
MD5
ae83bfc2f6148d415179d7d37ee7c704
-
SHA1
a1362d21cb6f823709453a18ec37839e247d73a8
-
SHA256
dc9f9ea5a8dc888825beff4a93f9b4909d4f55b83d1bb19360aec3e5aa53568d
-
SHA512
92444ffd4e65986a9aae10faa34ef83d1d265187c9174de4ebe366dd2b0124bc3096400204c2b1b875433d8b578a79139793cc971daaa609da07d8a088ae68b5
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5V:gh+ZkldoPK8YaKGV
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-