Analysis

  • max time kernel
    34s
  • max time network
    35s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/08/2024, 15:30

General

  • Target

    $EXEDIR/RevoUninstallerProPortable/x64/Vista/revoflt.sys

  • Size

    39KB

  • MD5

    498c3d4d44382a96812a0e0ff28d575b

  • SHA1

    c34586b789ca5fe4336ab23ad6ff6eeb991c9612

  • SHA256

    23cb784547268cf775636b07cac4c00b962fd10a7f9144d5d5886a9166919bba

  • SHA512

    ce450128e9ca1675eab8aa734dc907dfc55f3dacd62503339080d6bd47b2523d063786dbe28e6833db041f1d5869670be2411a39c7b8d93d05a98b4c09cad1a1

  • SSDEEP

    768:5UKM0N2alRO3gpeBJNUG+ML1naP6IXW0hzbhL7bCEMmo2ocAhu:DX+RtTL1naP6IzbhjCEDo2/Ahu

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\$EXEDIR\RevoUninstallerProPortable\x64\Vista\revoflt.sys
    1⤵
      PID:1000
      • C:\Users\Admin\AppData\Local\Temp\$EXEDIR\RevoUninstallerProPortable\x64\Vista\revoflt.sys
        C:\Users\Admin\AppData\Local\Temp\$EXEDIR\RevoUninstallerProPortable\x64\Vista\revoflt.sys
        2⤵
          PID:1392

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1392-0-0x0000000000010000-0x000000000001C000-memory.dmp

        Filesize

        48KB