General
- Target f9121f70b97cd705390f582a8b43b99ac7d5626316b23f92dfb7a28ffb21c59d
- Size 1.9MB
- Sample241012-e4wslatcpb
- SHA256 f9121f70b97cd705390f582a8b43b99ac7d5626316b23f92dfb7a28ffb21c59d
- MD5 5bb9a352877dd0438446eae73f2800cd
- SHA1 d7a9241110c75af5bf2652523ddfbab4b78f2455
- SHA512 eb98b24ccd6932cf2b6abbe7e7b65c39b5ef1b794f1bf06c81c09dcb2dba352367b5ae4f720375298c16063111277f759284bd46d07e66544dc9d7a0ef2a0e91
- SSDEEP 24576:Wtb20pkaCqT5TBWgNjVYa0VdjzKJ9TtrRRBHRWQMwTTOFzQJ9TtFKeWHRmBMwklj:DVg5tjVYaUs5xMwp5jMww5
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
f9121f70b97cd705390f582a8b43b99ac7d5626316b23f92dfb7a28ffb21c59d.exe
Resource
win7-20241010-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
f9121f70b97cd705390f582a8b43b99ac7d5626316b23f92dfb7a28ffb21c59d.exe
Resource
win10v2004-20241007-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target f9121f70b97cd705390f582a8b43b99ac7d5626316b23f92dfb7a28ffb21c59d
- Size 1.9MB
- SHA256 f9121f70b97cd705390f582a8b43b99ac7d5626316b23f92dfb7a28ffb21c59d
- MD5 5bb9a352877dd0438446eae73f2800cd
- SHA1 d7a9241110c75af5bf2652523ddfbab4b78f2455
- SHA512 eb98b24ccd6932cf2b6abbe7e7b65c39b5ef1b794f1bf06c81c09dcb2dba352367b5ae4f720375298c16063111277f759284bd46d07e66544dc9d7a0ef2a0e91
- SSDEEP 24576:Wtb20pkaCqT5TBWgNjVYa0VdjzKJ9TtrRRBHRWQMwTTOFzQJ9TtFKeWHRmBMwklj:DVg5tjVYaUs5xMwp5jMww5
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RevengeRat Executable
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL