General
-
Target
6ce88e8cdfcaa9f506bfe1bc1d5771a0N
-
Size
952KB
-
Sample
240915-afz3wsvela
-
MD5
6ce88e8cdfcaa9f506bfe1bc1d5771a0
-
SHA1
4e9c4d5be15fb3f4e98e62284d3e136d2fc54469
-
SHA256
1328c0b866c8e31de8f337fe4fe27681ba6e9c8156f8445430ab29479ed5f17b
-
SHA512
54ac391d3ad4bf16fb6a51fbdf9e89a4990c75927774f0dcd9455239f6e6d8799c246254b5e981e099c0036ca5e67ce524a1333bc3fab3d81e57516a1e602323
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5X:Rh+ZkldDPK8YaKjX
Static task
static1
Behavioral task
behavioral1
Sample
6ce88e8cdfcaa9f506bfe1bc1d5771a0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6ce88e8cdfcaa9f506bfe1bc1d5771a0N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
6ce88e8cdfcaa9f506bfe1bc1d5771a0N
-
Size
952KB
-
MD5
6ce88e8cdfcaa9f506bfe1bc1d5771a0
-
SHA1
4e9c4d5be15fb3f4e98e62284d3e136d2fc54469
-
SHA256
1328c0b866c8e31de8f337fe4fe27681ba6e9c8156f8445430ab29479ed5f17b
-
SHA512
54ac391d3ad4bf16fb6a51fbdf9e89a4990c75927774f0dcd9455239f6e6d8799c246254b5e981e099c0036ca5e67ce524a1333bc3fab3d81e57516a1e602323
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5X:Rh+ZkldDPK8YaKjX
Score10/10-
Drops startup file
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-