General
-
Target
1bacbeb5f98d78a72cae4bc3dee1dfe903300ee85bf53a92db7e8a28f4eaf0e3N.exe
-
Size
904KB
-
Sample
241117-z44hnatjgq
-
MD5
cbcab9b882f24b35dfad95930817eab0
-
SHA1
b314ae0ab0adc2e87f8296a0be94913724e5f9cc
-
SHA256
1bacbeb5f98d78a72cae4bc3dee1dfe903300ee85bf53a92db7e8a28f4eaf0e3
-
SHA512
d168d460b9c554b4fc7a2314dd4df9bfc6e5d08d86bba751025d1611e807310c049211630ea424c27c89a587b973e57070b2e103ff8c8ce92c3277d1358109db
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5w:gh+ZkldoPK8YaKGw
Static task
static1
Behavioral task
behavioral1
Sample
1bacbeb5f98d78a72cae4bc3dee1dfe903300ee85bf53a92db7e8a28f4eaf0e3N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
1bacbeb5f98d78a72cae4bc3dee1dfe903300ee85bf53a92db7e8a28f4eaf0e3N.exe
-
Size
904KB
-
MD5
cbcab9b882f24b35dfad95930817eab0
-
SHA1
b314ae0ab0adc2e87f8296a0be94913724e5f9cc
-
SHA256
1bacbeb5f98d78a72cae4bc3dee1dfe903300ee85bf53a92db7e8a28f4eaf0e3
-
SHA512
d168d460b9c554b4fc7a2314dd4df9bfc6e5d08d86bba751025d1611e807310c049211630ea424c27c89a587b973e57070b2e103ff8c8ce92c3277d1358109db
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5w:gh+ZkldoPK8YaKGw
Score10/10-
Revengerat family
-
Drops startup file
-
Suspicious use of SetThreadContext
-