General
-
Target
6857af7e93505633ca39a3df4199b80afcffc0a96fd9344538c35f6323f2010dN
-
Size
904KB
-
Sample
240920-shgcnstarp
-
MD5
f7304d9eef3be6d98dbcd71cf65c5c00
-
SHA1
890c4a9c9ee89fdf77ee1dc2ffec66eb783ca652
-
SHA256
6857af7e93505633ca39a3df4199b80afcffc0a96fd9344538c35f6323f2010d
-
SHA512
936d1401634c46295c8377af9bc5e2c7c3b9c05e79eeb6c1b11719e5725da543f9591472efed75f11bd9cd953133c2936ac99764aa5d347903cf01884c4ea48e
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5C:gh+ZkldoPK8YaKGC
Static task
static1
Behavioral task
behavioral1
Sample
6857af7e93505633ca39a3df4199b80afcffc0a96fd9344538c35f6323f2010dN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6857af7e93505633ca39a3df4199b80afcffc0a96fd9344538c35f6323f2010dN.exe
Resource
win10v2004-20240910-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
6857af7e93505633ca39a3df4199b80afcffc0a96fd9344538c35f6323f2010dN
-
Size
904KB
-
MD5
f7304d9eef3be6d98dbcd71cf65c5c00
-
SHA1
890c4a9c9ee89fdf77ee1dc2ffec66eb783ca652
-
SHA256
6857af7e93505633ca39a3df4199b80afcffc0a96fd9344538c35f6323f2010d
-
SHA512
936d1401634c46295c8377af9bc5e2c7c3b9c05e79eeb6c1b11719e5725da543f9591472efed75f11bd9cd953133c2936ac99764aa5d347903cf01884c4ea48e
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5C:gh+ZkldoPK8YaKGC
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-