General
-
Target
VirTool.Win32.AutInject.pz-4506ceabf255c3969c0d9c24cf97c01a5144ed5434d0321443b8a67df5157a10N
-
Size
904KB
-
Sample
240917-gdhjdsxdrn
-
MD5
fefdeeeed62fa2b8f9719f8b3e523210
-
SHA1
5aac925ebda82d7ae03de0949fa21a188ab80d9a
-
SHA256
4506ceabf255c3969c0d9c24cf97c01a5144ed5434d0321443b8a67df5157a10
-
SHA512
82168f0eac62a5caf8537c30f604bb33b3aee3ccc66658eb5449edcf05bc3b713c20c6ce1d67288e4ecbde1c85cb78811fd7e3939a9b7962739c3b26508b4ffa
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5G:gh+ZkldoPK8YaKGG
Static task
static1
Behavioral task
behavioral1
Sample
VirTool.Win32.AutInject.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
VirTool.Win32.AutInject.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
VirTool.Win32.AutInject.pz-4506ceabf255c3969c0d9c24cf97c01a5144ed5434d0321443b8a67df5157a10N
-
Size
904KB
-
MD5
fefdeeeed62fa2b8f9719f8b3e523210
-
SHA1
5aac925ebda82d7ae03de0949fa21a188ab80d9a
-
SHA256
4506ceabf255c3969c0d9c24cf97c01a5144ed5434d0321443b8a67df5157a10
-
SHA512
82168f0eac62a5caf8537c30f604bb33b3aee3ccc66658eb5449edcf05bc3b713c20c6ce1d67288e4ecbde1c85cb78811fd7e3939a9b7962739c3b26508b4ffa
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5G:gh+ZkldoPK8YaKGG
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-