Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2328-8-0x0000000000400000-0x0000000000408000-memory.dmp

  • Size

    32KB

  • MD5

    ceca845c765cf0243de6ecda54544c44

  • SHA1

    1df01038b92c4e605b26771e3f30a0aa4df2609c

  • SHA256

    4c6b17235db22fbd705e1e247d44829685c0bdb6645863a5b8bd9249f22f97f0

  • SHA512

    ddd90bc18328d76bae160321cf0fab932dac86325f18ec7247a411428cc6dcf229d3fb2d311063ac65d5ec2fb9b6573e4d0e31bb5f8d0943a85585cd45652453

  • SSDEEP

    384:F7mHny19HqmjuqRz9oDPlMNcLlb5sVK9y/5Ct:F7mHny19NjVtclMNEYo

Score
10/10

Malware Config

Extracted

Family

revengerat

Botnet

Marzo26

C2

marzorevenger.duckdns.org:4230

Mutex

RV_MUTEX-PiGGjjtnxDpn

Signatures

  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2328-8-0x0000000000400000-0x0000000000408000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections