General
-
Target
108db3cf0fa07cb5d1f0a2116986c48ebc4082766ad56e62ed0b7d3db66a9040N.exe
-
Size
904KB
-
Sample
240926-zcgvkswfpj
-
MD5
e36dee2216cb511507b8aba89bdc01b0
-
SHA1
21503ecd95e806b20b5f1b108aed66b45fea7dad
-
SHA256
108db3cf0fa07cb5d1f0a2116986c48ebc4082766ad56e62ed0b7d3db66a9040
-
SHA512
8050e1ece03192bd2b2183028dcf9f290a1b09a48dfad8c09072bd451c700f942e091e42c1150412c6758d5e00f032a6abb3fb45a0717a7c700c2b03424ed34b
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5d:gh+ZkldoPK8YaKGd
Static task
static1
Behavioral task
behavioral1
Sample
108db3cf0fa07cb5d1f0a2116986c48ebc4082766ad56e62ed0b7d3db66a9040N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
108db3cf0fa07cb5d1f0a2116986c48ebc4082766ad56e62ed0b7d3db66a9040N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
108db3cf0fa07cb5d1f0a2116986c48ebc4082766ad56e62ed0b7d3db66a9040N.exe
-
Size
904KB
-
MD5
e36dee2216cb511507b8aba89bdc01b0
-
SHA1
21503ecd95e806b20b5f1b108aed66b45fea7dad
-
SHA256
108db3cf0fa07cb5d1f0a2116986c48ebc4082766ad56e62ed0b7d3db66a9040
-
SHA512
8050e1ece03192bd2b2183028dcf9f290a1b09a48dfad8c09072bd451c700f942e091e42c1150412c6758d5e00f032a6abb3fb45a0717a7c700c2b03424ed34b
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5d:gh+ZkldoPK8YaKGd
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-