General
-
Target
f2e4a44613b0a886bfb090be513ab530N
-
Size
904KB
-
Sample
240910-b2c1xssdnf
-
MD5
f2e4a44613b0a886bfb090be513ab530
-
SHA1
6dceae8584a41078f3952da79d2b8f516724f06b
-
SHA256
864337d81d02530a6df3eb5549a65cfc260d84cc66bf33a14608109b63137507
-
SHA512
ebd2869ff54ebf97584b19b933184aed5da9022ffd3a599cd7490239c101a46f428a1888886608a7c7a9a5551829b8f23a5ba99cf76f02f5254c016500f32dd6
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5A:gh+ZkldoPK8YaKGA
Static task
static1
Behavioral task
behavioral1
Sample
f2e4a44613b0a886bfb090be513ab530N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f2e4a44613b0a886bfb090be513ab530N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
f2e4a44613b0a886bfb090be513ab530N
-
Size
904KB
-
MD5
f2e4a44613b0a886bfb090be513ab530
-
SHA1
6dceae8584a41078f3952da79d2b8f516724f06b
-
SHA256
864337d81d02530a6df3eb5549a65cfc260d84cc66bf33a14608109b63137507
-
SHA512
ebd2869ff54ebf97584b19b933184aed5da9022ffd3a599cd7490239c101a46f428a1888886608a7c7a9a5551829b8f23a5ba99cf76f02f5254c016500f32dd6
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5A:gh+ZkldoPK8YaKGA
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-