General
-
Target
c7a6e0e2b4e6eb983f601a7f3e91bd93efd25ac0f9b11dd73ecb4f9cda8d8bfdN
-
Size
904KB
-
Sample
240922-gnx2tsvcrl
-
MD5
b7f2d56ab925f81324d72c4e78882580
-
SHA1
f542fbc0237cd410ac8c9957c4e771bf849329bb
-
SHA256
c7a6e0e2b4e6eb983f601a7f3e91bd93efd25ac0f9b11dd73ecb4f9cda8d8bfd
-
SHA512
f5989ea5d21fe5928d03e76698fe0ea65450720077c80f300f5cdde539c435917472b74e98ce69f6e7ad4ba8850a12cddc7b1ce78f300ff820ddbe0b1af632c6
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5t:gh+ZkldoPK8YaKGt
Static task
static1
Behavioral task
behavioral1
Sample
c7a6e0e2b4e6eb983f601a7f3e91bd93efd25ac0f9b11dd73ecb4f9cda8d8bfdN.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c7a6e0e2b4e6eb983f601a7f3e91bd93efd25ac0f9b11dd73ecb4f9cda8d8bfdN.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
c7a6e0e2b4e6eb983f601a7f3e91bd93efd25ac0f9b11dd73ecb4f9cda8d8bfdN
-
Size
904KB
-
MD5
b7f2d56ab925f81324d72c4e78882580
-
SHA1
f542fbc0237cd410ac8c9957c4e771bf849329bb
-
SHA256
c7a6e0e2b4e6eb983f601a7f3e91bd93efd25ac0f9b11dd73ecb4f9cda8d8bfd
-
SHA512
f5989ea5d21fe5928d03e76698fe0ea65450720077c80f300f5cdde539c435917472b74e98ce69f6e7ad4ba8850a12cddc7b1ce78f300ff820ddbe0b1af632c6
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5t:gh+ZkldoPK8YaKGt
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-