General

  • Target

    ReviveInstaller.exe

  • Size

    55.7MB

  • MD5

    c15f4bd0550274225523929d6a79f179

  • SHA1

    fbcd8158524c6e9a3012b6107d4861ca27a6439e

  • SHA256

    7a2b59711237f934c5772eff29ef61c3f0e9e701976e7703fc3af4d8ff04487b

  • SHA512

    42b07b7877b036397833508edfabfeb36630579ed8332595b12d65e916f077db555de8b07c2b58fa660e74e1559ff8ab458e7ea1aaece3e5ff0a2fa735082c0e

  • SSDEEP

    1572864:8JFpFNuLbTh4lpSe++oSoro8fQaC38M3MylKlayzyPSWPpFUzMbzFCsYA:8tuzh4lYooS0TtCsFylNyzyKsF5osYA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • ReviveInstaller.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    6b225baf8d24583523d4f42890e12522


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • Input/action_manifest.json
  • Input/gamepad_default.json
  • Input/holographic_controller_default.json
  • Input/knuckles_default.json
  • Input/oculus_touch_default.json
  • Input/vive_controller_default.json
  • Input/vive_cosmos_default.json
  • LICENSE
  • LibRevive32.dll
    .dll windows:6 windows x86 arch:x86

    cb63c094b0c11f5411e823aff6c915f7


    Headers

    Imports

    Exports

    Sections

  • LibRevive64.dll
    .dll windows:6 windows x64 arch:x64

    c0fb20121bad2c6aaab0f49d25fb8acc


    Headers

    Imports

    Exports

    Sections

  • LibReviveXR32.dll
    .dll windows:6 windows x86 arch:x86

    3731c20b70415ffd8fc796033a289a6f


    Headers

    Imports

    Exports

    Sections

  • LibReviveXR64.dll
    .dll windows:6 windows x64 arch:x64

    611646c8daa594fda77c6a62f4ac1159


    Headers

    Imports

    Exports

    Sections

  • Qt/labs/folderlistmodel/plugins.qmltypes
  • Qt/labs/folderlistmodel/qmldir
  • Qt/labs/folderlistmodel/qmlfolderlistmodelplugin.dll
    .dll windows:6 windows x64 arch:x64

    1f55dc252b7878fc34520fa989a802bf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    6d44a16d5801e1cdb9b3ba4cb45314b0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gamepad.dll
    .dll windows:6 windows x64 arch:x64

    14b10b2f5b548f4357a961cf5482092a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    ddcb78f3a4297344c620aa83af64ddfd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Multimedia.dll
    .dll windows:6 windows x64 arch:x64

    7600665a844daa64d88eb4f04005092e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5MultimediaQuick.dll
    .dll windows:6 windows x64 arch:x64

    103f90bfe6db9e1809e6d6ae8946c710


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    c0e2c58de25ce77b283ad911460cea11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Qml.dll
    .dll windows:6 windows x64 arch:x64

    17c45f48289bee293cec012345a8096d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5QmlModels.dll
    .dll windows:6 windows x64 arch:x64

    53c7f625a0c46de552b4b53839bc1d6c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5QmlWorkerScript.dll
    .dll windows:6 windows x64 arch:x64

    9a8b1dfa7fb58901465fb5d52bd5bc2f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Quick.dll
    .dll windows:6 windows x64 arch:x64

    d6c8cb31820bb3c11dcd63f44dd924fb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5RemoteObjects.dll
    .dll windows:6 windows x64 arch:x64

    110c1990d0447b51d46fe7fd48f0e0bc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Sql.dll
    .dll windows:6 windows x64 arch:x64

    f5ad3dcde1acf335cee21a88fd9c22a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Svg.dll
    .dll windows:6 windows x64 arch:x64

    6c684f5759e91250e01af7b49c78ca3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    8ac796c200bcdb47fab6297f47883022


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtGamepad/declarative_gamepad.dll
    .dll windows:6 windows x64 arch:x64

    ee01158797a47030cda190030c141a12


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtGamepad/plugins.qmltypes
  • QtGamepad/qmldir
  • QtGraphicalEffects/Blend.qml
    .js
  • QtGraphicalEffects/BrightnessContrast.qml
  • QtGraphicalEffects/ColorOverlay.qml
  • QtGraphicalEffects/Colorize.qml
  • QtGraphicalEffects/ConicalGradient.qml
  • QtGraphicalEffects/Desaturate.qml
  • QtGraphicalEffects/DirectionalBlur.qml
    .js
  • QtGraphicalEffects/Displace.qml
  • QtGraphicalEffects/DropShadow.qml
  • QtGraphicalEffects/FastBlur.qml
    .js
  • QtGraphicalEffects/GammaAdjust.qml
  • QtGraphicalEffects/GaussianBlur.qml
    .js
  • QtGraphicalEffects/Glow.qml
  • QtGraphicalEffects/HueSaturation.qml
  • QtGraphicalEffects/InnerShadow.qml
  • QtGraphicalEffects/LevelAdjust.qml
  • QtGraphicalEffects/LinearGradient.qml
  • QtGraphicalEffects/MaskedBlur.qml
  • QtGraphicalEffects/OpacityMask.qml
  • QtGraphicalEffects/RadialBlur.qml
    .js
  • QtGraphicalEffects/RadialGradient.qml
  • QtGraphicalEffects/RectangularGlow.qml
    .js
  • QtGraphicalEffects/RecursiveBlur.qml
  • QtGraphicalEffects/ThresholdMask.qml
  • QtGraphicalEffects/ZoomBlur.qml
    .js
  • QtGraphicalEffects/plugins.qmltypes
  • QtGraphicalEffects/private/DropShadowBase.qml
  • QtGraphicalEffects/private/DropShadowBase.qmlc
  • QtGraphicalEffects/private/FastGlow.qml
    .js
  • QtGraphicalEffects/private/FastGlow.qmlc
  • QtGraphicalEffects/private/FastInnerShadow.qml
    .js
  • QtGraphicalEffects/private/FastInnerShadow.qmlc
  • QtGraphicalEffects/private/FastMaskedBlur.qml
  • QtGraphicalEffects/private/FastMaskedBlur.qmlc
  • QtGraphicalEffects/private/GaussianDirectionalBlur.qml
    .js
  • QtGraphicalEffects/private/GaussianDirectionalBlur.qmlc
  • QtGraphicalEffects/private/GaussianGlow.qml
  • QtGraphicalEffects/private/GaussianGlow.qmlc
  • QtGraphicalEffects/private/GaussianInnerShadow.qml
  • QtGraphicalEffects/private/GaussianInnerShadow.qmlc
  • QtGraphicalEffects/private/GaussianMaskedBlur.qml
  • QtGraphicalEffects/private/GaussianMaskedBlur.qmlc
  • QtGraphicalEffects/private/qmldir
  • QtGraphicalEffects/private/qtgraphicaleffectsprivate.dll
    .dll windows:6 windows x64 arch:x64

    f6d407d578bc8d9f031a285326cb0c96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtGraphicalEffects/qmldir
  • QtGraphicalEffects/qtgraphicaleffectsplugin.dll
    .dll windows:6 windows x64 arch:x64

    d598e0a17a03c490b3d5472852d2c33e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtMultimedia/Video.qml
  • QtMultimedia/declarative_multimedia.dll
    .dll windows:6 windows x64 arch:x64

    bf432d1780ab9b12b285f534e5b3288d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtMultimedia/plugins.qmltypes
  • QtMultimedia/qmldir
  • QtQml/Models.2/modelsplugin.dll
    .dll windows:6 windows x64 arch:x64

    1e85d4c38b890789924f041bcbe4930c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtQml/Models.2/plugins.qmltypes
  • QtQml/Models.2/qmldir
  • QtQml/RemoteObjects/plugins.qmltypes
  • QtQml/RemoteObjects/qmldir
  • QtQml/RemoteObjects/qtqmlremoteobjects.dll
    .dll windows:6 windows x64 arch:x64

    3aba89536d430cda2cff2a49c786773f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtQml/StateMachine/plugins.qmltypes
  • QtQml/StateMachine/qmldir
  • QtQml/StateMachine/qtqmlstatemachine.dll
    .dll windows:6 windows x64 arch:x64

    d39ad77b8e73c67430970dec61bc5a45


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtQml/WorkerScript.2/plugins.qmltypes
  • QtQml/WorkerScript.2/qmldir
  • QtQml/WorkerScript.2/workerscriptplugin.dll
    .dll windows:6 windows x64 arch:x64

    bcb42c2f36129b230d6a875dd30601d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtQml/plugins.qmltypes
  • QtQml/qmldir
  • QtQml/qmlplugin.dll
    .dll windows:6 windows x64 arch:x64

    810a32a56278e396f4949f6c72750b42


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtQuick.2/plugins.qmltypes
  • QtQuick.2/qmldir
  • QtQuick.2/qtquick2plugin.dll
    .dll windows:6 windows x64 arch:x64

    b2166f55a8ed3ead5b33c478534f83fc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtQuick/Window.2/plugins.qmltypes
  • QtQuick/Window.2/qmldir
  • QtQuick/Window.2/windowplugin.dll
    .dll windows:6 windows x64 arch:x64

    e5782dde87704f3a54b8a48bd60895b8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ReviveInjector.exe
    .exe windows:6 windows x64 arch:x64

    54aab529a14bf3f6a72ed3b39dffbd2f


    Headers

    Imports

    Sections

  • ReviveOverlay.exe
    .exe windows:6 windows x64 arch:x64

    1be953760851645247c083a46f326f36


    Headers

    Imports

    Exports

    Sections

  • SupportAssets/oculus-dreamdeck-nux/cover_landscape_image.jpg
    .jpg
  • SupportAssets/oculus-dreamdeck-nux/cover_square_image.jpg
    .jpg
  • SupportAssets/oculus-first-contact/cover_landscape_image.jpg
    .jpg
  • SupportAssets/oculus-first-contact/cover_square_image.jpg
    .jpg
  • SupportAssets/oculus-touch-tutorial/cover_landscape_image.jpg
    .jpg
  • SupportAssets/oculus-touch-tutorial/cover_square_image.jpg
    .jpg
  • SupportAssets/oculus-worlds/cover_landscape_image.jpg
    .jpg
  • SupportAssets/oculus-worlds/cover_square_image.jpg
    .jpg
  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • app.vrmanifest
  • audio/qtaudio_wasapi.dll
    .dll windows:6 windows x64 arch:x64

    97893cf9ba330ec2980ec6da9403f43f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • audio/qtaudio_windows.dll
    .dll windows:6 windows x64 arch:x64

    1c5ff8da39b1af9d7b7a3c16edd04032


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bearer/qgenericbearer.dll
    .dll windows:6 windows x64 arch:x64

    7e5a6b3fee029b445d01034aff7a919d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    dc71769f237c0a3ba38879380c54a4e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • gamepads/xinputgamepad.dll
    .dll windows:6 windows x64 arch:x64

    5374aa1d07d25f765f274c5bd97cfb02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • hook.cmd
  • iconengines/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    cb7bcafac90ccee76bfa5d1af9cbb951


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    83ab23a3497602da865da8cb952268f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    68eb3d9bbb362d72fd269c31936761fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    35e88ae047c52cbe14244b0b041c3d03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    bb20e83974c98263f528b6a929a02bdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    2cf21fe757a0a84f5b8a5594668ca036


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    870b9d72e7052f0dd8d119bd2bf4aa05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    9fe4e69f865bd693d0a0abfdb4d03dc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    305f5f129c922b027d0dae792141dfe6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    75ef711dbfdc9de487f7cfea43217256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libEGL.dll
    .dll windows:6 windows x64 arch:x64

    2571158206a6160a4e001934364aa256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:6 windows x64 arch:x64

    f703387b50fa5341f52a2bbf457da55a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcrypto-1_1-x64.dll
    .dll windows:5 windows x64 arch:x64

    6faee67a691b5510cdbffa2f65fadb6a


    Headers

    Imports

    Exports

    Sections

  • libssl-1_1-x64.dll
    .dll windows:5 windows x64 arch:x64

    0741defe9a1a1e75aa2cbc19a5413b3c


    Headers

    Imports

    Exports

    Sections

  • mediaservice/dsengine.dll
    .dll windows:6 windows x64 arch:x64

    889d8030c65f580ddd002fbfacbe74a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mediaservice/qtmedia_audioengine.dll
    .dll windows:6 windows x64 arch:x64

    e7cf9d1c85056f7d41bfc28554075538


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mediaservice/wmfengine.dll
    .dll windows:6 windows x64 arch:x64

    52a5b8315ff73abbd15ef15794f718e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • opengl32sw.dll
    .dll windows:6 windows x64 arch:x64

    7c204a15e246f025a7513db5a566a6e9


    Headers

    Imports

    Exports

    Sections

  • openvr_api32.dll
    .dll windows:6 windows x86 arch:x86

    828491d7094e59185bbb7995ee81d395


    Headers

    Imports

    Exports

    Sections

  • openvr_api64.dll
    .dll windows:6 windows x64 arch:x64

    3e65de6f188ab7a3ac0825f130ba5f04


    Headers

    Imports

    Exports

    Sections

  • platforminputcontexts/qtvirtualkeyboardplugin.dll
    .dll windows:6 windows x64 arch:x64

    b90a21ff3ebd0b889a103f97de8d07b8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    b8287a581b45f1f245f12be7c017f17f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • playlistformats/qtmultimedia_m3u.dll
    .dll windows:6 windows x64 arch:x64

    93ae6ffdaf392b7c9ce037ac23e5e56c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qmltooling/qmldbg_debugger.dll
    .dll windows:6 windows x64 arch:x64

    586b25086bb210fcb609fa015c67396d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qmltooling/qmldbg_inspector.dll
    .dll windows:6 windows x64 arch:x64

    431ece1fc2dc4bff1058685e8fc37dc2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qmltooling/qmldbg_local.dll
    .dll windows:6 windows x64 arch:x64

    4121956620909ba19da3d45a8f34ce59


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qmltooling/qmldbg_messages.dll
    .dll windows:6 windows x64 arch:x64

    090c755495262edadf2edf5a68ec0034


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qmltooling/qmldbg_native.dll
    .dll windows:6 windows x64 arch:x64

    0019c6992855405d9e21428361759abf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qmltooling/qmldbg_nativedebugger.dll
    .dll windows:6 windows x64 arch:x64

    871b545ce72d59cd6642f9ca65494763


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qmltooling/qmldbg_preview.dll
    .dll windows:6 windows x64 arch:x64

    dccf10bc78979e8838a332b8b2582e49


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qmltooling/qmldbg_profiler.dll
    .dll windows:6 windows x64 arch:x64

    8103dca07e2b3d29a455d71f125d1323


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qmltooling/qmldbg_quickprofiler.dll
    .dll windows:6 windows x64 arch:x64

    ba9a724732af29eed64bef24c44103a0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qmltooling/qmldbg_server.dll
    .dll windows:6 windows x64 arch:x64

    b9f9a3ffada66f802994b150b5306e83


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qmltooling/qmldbg_tcp.dll
    .dll windows:6 windows x64 arch:x64

    a5d2c1e69b215726350f07d5d0f8e09b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • scenegraph/qsgd3d12backend.dll
    .dll windows:6 windows x64 arch:x64

    5549bca9771ae1d25caa25289b023865


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqldrivers/qsqlite.dll
    .dll windows:6 windows x64 arch:x64

    81126aba7f7a6189db40b88afea54148


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqldrivers/qsqlodbc.dll
    .dll windows:6 windows x64 arch:x64

    acfce55392947a30501ebe5acbe751c4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • sqldrivers/qsqlpsql.dll
    .dll windows:6 windows x64 arch:x64

    5dacbf05e8cc156bb50566cd20eecc08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    3d3040efa646d84bc8bc2fb2d65abf99


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • support.vrmanifest
  • vc_redist.x64.exe
    .exe windows:5 windows x86 arch:x86

    1a5cdbf711fee14b077e599d13fddab2


    Code Sign

    Headers

    Imports

    Sections

  • virtualkeyboard/qtvirtualkeyboard_hangul.dll
    .dll windows:6 windows x64 arch:x64

    c5ae91e6e3365ee88ee0625289ab5e06


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • virtualkeyboard/qtvirtualkeyboard_openwnn.dll
    .dll windows:6 windows x64 arch:x64

    582f0d3ca8ba732377f9617918a341d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • virtualkeyboard/qtvirtualkeyboard_pinyin.dll
    .dll windows:6 windows x64 arch:x64

    92dade30a9c0ef705a8d501138a2b84a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • virtualkeyboard/qtvirtualkeyboard_tcime.dll
    .dll windows:6 windows x64 arch:x64

    f0a7127c40ef298d5f9ffaa4aecc7e9d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • virtualkeyboard/qtvirtualkeyboard_thai.dll
    .dll windows:6 windows x64 arch:x64

    b9b4233983ab297de5933f1761474b8f


    Code Sign

    Headers

    Imports

    Exports

    Sections