General
-
Target
bdeba897bffa038fb03b098889c6a9b2a43e7307386084f56d1dae38d8e19042
-
Size
904KB
-
Sample
240906-p3rglaxbll
-
MD5
c850ead2fbea82ad60fe4248208602c0
-
SHA1
6ccced0687ca2afa68cf66b59ec4dcfbaf9768ad
-
SHA256
bdeba897bffa038fb03b098889c6a9b2a43e7307386084f56d1dae38d8e19042
-
SHA512
54e671858f5392347c418fc11a2763ab5f9338f60e6673c80f8a5c6be20e2e5939714518191e12d1b6be13f6c474859c1b1419c1befa68a76f78a56f2c3dea5b
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5f:gh+ZkldoPK8YaKGf
Static task
static1
Behavioral task
behavioral1
Sample
bdeba897bffa038fb03b098889c6a9b2a43e7307386084f56d1dae38d8e19042.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bdeba897bffa038fb03b098889c6a9b2a43e7307386084f56d1dae38d8e19042.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
bdeba897bffa038fb03b098889c6a9b2a43e7307386084f56d1dae38d8e19042
-
Size
904KB
-
MD5
c850ead2fbea82ad60fe4248208602c0
-
SHA1
6ccced0687ca2afa68cf66b59ec4dcfbaf9768ad
-
SHA256
bdeba897bffa038fb03b098889c6a9b2a43e7307386084f56d1dae38d8e19042
-
SHA512
54e671858f5392347c418fc11a2763ab5f9338f60e6673c80f8a5c6be20e2e5939714518191e12d1b6be13f6c474859c1b1419c1befa68a76f78a56f2c3dea5b
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5f:gh+ZkldoPK8YaKGf
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-