General
-
Target
b0aff5a87339c71a8fd5b4714d7b6970N.exe
-
Size
952KB
-
Sample
240824-yxwc2ayeml
-
MD5
b0aff5a87339c71a8fd5b4714d7b6970
-
SHA1
4aaa6a2df50dd2653296793dc25afc7968fc6ecb
-
SHA256
e2ca6a0358a57f10be165d06469046fa711f9f5d1dc31183c820897db7358198
-
SHA512
b50d164c4914f5021b5cb72dee2125d242c013bad73c5c51750ba9fae333da418042d641b67c40426be35f31d6de473a98e9893a04fa756721a82b6223082c28
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5u:Rh+ZkldDPK8YaKju
Static task
static1
Behavioral task
behavioral1
Sample
b0aff5a87339c71a8fd5b4714d7b6970N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b0aff5a87339c71a8fd5b4714d7b6970N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
b0aff5a87339c71a8fd5b4714d7b6970N.exe
-
Size
952KB
-
MD5
b0aff5a87339c71a8fd5b4714d7b6970
-
SHA1
4aaa6a2df50dd2653296793dc25afc7968fc6ecb
-
SHA256
e2ca6a0358a57f10be165d06469046fa711f9f5d1dc31183c820897db7358198
-
SHA512
b50d164c4914f5021b5cb72dee2125d242c013bad73c5c51750ba9fae333da418042d641b67c40426be35f31d6de473a98e9893a04fa756721a82b6223082c28
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5u:Rh+ZkldDPK8YaKju
Score10/10-
Drops startup file
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-