General
-
Target
395482dd9820f7de6384710499e241ec62032698ca24569a02b460ca3668a976N
-
Size
904KB
-
Sample
241106-szc2ksvnhl
-
MD5
627509b850cba2b88925efefa4f54790
-
SHA1
7f862beb7f843929a0fc86db0faf5d8e23a741de
-
SHA256
395482dd9820f7de6384710499e241ec62032698ca24569a02b460ca3668a976
-
SHA512
9a42ae04d65d9201d8a3f85a644ea9c5aca54c4e8e043c5d5387b44761092371e15d5c9932cc8f4ab3a72ee927312ccb3893cd2049350b7226a693a240bffdb2
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5H:gh+ZkldoPK8YaKGH
Static task
static1
Behavioral task
behavioral1
Sample
395482dd9820f7de6384710499e241ec62032698ca24569a02b460ca3668a976N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
395482dd9820f7de6384710499e241ec62032698ca24569a02b460ca3668a976N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
395482dd9820f7de6384710499e241ec62032698ca24569a02b460ca3668a976N
-
Size
904KB
-
MD5
627509b850cba2b88925efefa4f54790
-
SHA1
7f862beb7f843929a0fc86db0faf5d8e23a741de
-
SHA256
395482dd9820f7de6384710499e241ec62032698ca24569a02b460ca3668a976
-
SHA512
9a42ae04d65d9201d8a3f85a644ea9c5aca54c4e8e043c5d5387b44761092371e15d5c9932cc8f4ab3a72ee927312ccb3893cd2049350b7226a693a240bffdb2
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5H:gh+ZkldoPK8YaKGH
Score10/10-
Revengerat family
-
Drops startup file
-
Suspicious use of SetThreadContext
-