Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

2930fa97ee...0N.exe

windows7-x64

10

2930fa97ee...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2930fa97ee8326d7b15447dd01995d20N.exe

  • Size

    904KB

  • Sample

    240821-gq7n2swhkp

  • MD5

    2930fa97ee8326d7b15447dd01995d20

  • SHA1

    3ccadeed0b95fc60486c395a9924e022c413ad5c

  • SHA256

    0435684465ff28f7e4f858e08284da144046a0117856e91a4af164ba82bf1bb9

  • SHA512

    8995a26d5a069d3df395ced6d3faae2d4bae7caca350d5019cb16b4664f4d5bcedcb31a951f60fcd6a913e2f83b1eec559927a12d426095a30ef235659f50de7

  • SSDEEP

    24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5p:gh+ZkldoPK8YaKGp

Score
10/10
revengeratmarzo26discoverytrojan

Malware Config

Extracted

Family

revengerat

Botnet

Marzo26

C2

marzorevenger.duckdns.org:4230

Mutex

RV_MUTEX-PiGGjjtnxDpn

Targets

    • Target

      2930fa97ee8326d7b15447dd01995d20N.exe

    • Size

      904KB

    • MD5

      2930fa97ee8326d7b15447dd01995d20

    • SHA1

      3ccadeed0b95fc60486c395a9924e022c413ad5c

    • SHA256

      0435684465ff28f7e4f858e08284da144046a0117856e91a4af164ba82bf1bb9

    • SHA512

      8995a26d5a069d3df395ced6d3faae2d4bae7caca350d5019cb16b4664f4d5bcedcb31a951f60fcd6a913e2f83b1eec559927a12d426095a30ef235659f50de7

    • SSDEEP

      24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5p:gh+ZkldoPK8YaKGp

    Score
    10/10
    revengeratmarzo26discoverytrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks