dba8e948206d56025bdbf1471cf7a2defc33fbc2bbde0c5634361d661d67ab93 | Triage

Submit
Reports

Overview

overview

Static

static

dba8e94820...3N.exe

windows7-x64

dba8e94820...3N.exe

windows10-2004-x64

$PLUGINSDI...SC.dll

windows7-x64

3

$PLUGINSDI...SC.dll

windows10-2004-x64

3

ETConnectServer.exe

windows7-x64

1

ETConnectServer.exe

windows10-2004-x64

1

ETConnectService.exe

windows7-x64

1

ETConnectService.exe

windows10-2004-x64

1

bin/MSLogonACL.exe

windows7-x64

1

bin/MSLogonACL.exe

windows10-2004-x64

3

bin/MSRC4Plugin.dll

windows7-x64

3

bin/MSRC4Plugin.dll

windows10-2004-x64

3

bin/SCHook.dll

windows7-x64

3

bin/SCHook.dll

windows10-2004-x64

3

bin/Secure...in.dll

windows7-x64

3

bin/Secure...in.dll

windows10-2004-x64

3

bin/authSSP.dll

windows7-x64

5

bin/authSSP.dll

windows10-2004-x64

3

bin/authadmin.dll

windows7-x64

3

bin/authadmin.dll

windows10-2004-x64

3

bin/ldapauth.dll

windows7-x64

3

bin/ldapauth.dll

windows10-2004-x64

3

bin/logging.dll

windows7-x64

5

bin/logging.dll

windows10-2004-x64

5

bin/logmessages.dll

windows7-x64

1

bin/logmessages.dll

windows10-2004-x64

1

bin/uvnc_settings.exe

windows7-x64

1

bin/uvnc_settings.exe

windows10-2004-x64

1

bin/vnchooks.dll

windows7-x64

3

bin/vnchooks.dll

windows10-2004-x64

3

bin/vncviewer.exe

windows7-x64

3

bin/vncviewer.exe

windows10-2004-x64

3

Analysis

max time kernel
93s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2024 18:07

Sharing

Static task

static1

stealer revengerat

4 signatures

Behavioral task

behavioral1

Sample

dba8e948206d56025bdbf1471cf7a2defc33fbc2bbde0c5634361d661d67ab93N.exe

Resource

win7-20241010-en

revengerat discovery stealer trojan

windows7-x64

15 signatures

120 seconds

Behavioral task

behavioral2

Sample

dba8e948206d56025bdbf1471cf7a2defc33fbc2bbde0c5634361d661d67ab93N.exe

Resource

win10v2004-20241007-en

revengerat discovery stealer trojan

windows10-2004-x64

14 signatures

120 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/SimpleSC.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

120 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/SimpleSC.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral5

Sample

ETConnectServer.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

120 seconds

Behavioral task

behavioral6

Sample

ETConnectServer.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

120 seconds

Behavioral task

behavioral7

Sample

ETConnectService.exe

Resource

win7-20240903-en

windows7-x64

1 signatures

120 seconds

Behavioral task

behavioral8

Sample

ETConnectService.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

120 seconds

Behavioral task

behavioral9

Sample

bin/MSLogonACL.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

120 seconds

Behavioral task

behavioral10

Sample

bin/MSLogonACL.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

120 seconds

Behavioral task

behavioral11

Sample

bin/MSRC4Plugin.dll

Resource

win7-20240708-en

windows7-x64

2 signatures

120 seconds

Behavioral task

behavioral12

Sample

bin/MSRC4Plugin.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

120 seconds

Behavioral task

behavioral13

Sample

bin/SCHook.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

120 seconds

Behavioral task

behavioral14

Sample

bin/SCHook.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral15

Sample

bin/SecureVNCPlugin.dll

Resource

win7-20241010-en

windows7-x64

4 signatures

120 seconds

Behavioral task

behavioral16

Sample

bin/SecureVNCPlugin.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

4 signatures

120 seconds

Behavioral task

behavioral17

Sample

bin/authSSP.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

120 seconds

Behavioral task

behavioral18

Sample

bin/authSSP.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral19

Sample

bin/authadmin.dll

Resource

win7-20241023-en

windows7-x64

2 signatures

120 seconds

Behavioral task

behavioral20

Sample

bin/authadmin.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral21

Sample

bin/ldapauth.dll

Resource

win7-20240729-en

windows7-x64

3 signatures

120 seconds

Behavioral task

behavioral22

Sample

bin/ldapauth.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral23

Sample

bin/logging.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

120 seconds

Behavioral task

behavioral24

Sample

bin/logging.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

120 seconds

Behavioral task

behavioral25

Sample

bin/logmessages.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

120 seconds

Behavioral task

behavioral26

Sample

bin/logmessages.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral27

Sample

bin/uvnc_settings.exe

Resource

win7-20241010-en

windows7-x64

0 signatures

120 seconds

Behavioral task

behavioral28

Sample

bin/uvnc_settings.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

120 seconds

Behavioral task

behavioral29

Sample

bin/vnchooks.dll

Resource

win7-20240729-en

windows7-x64

2 signatures

120 seconds

Behavioral task

behavioral30

Sample

bin/vnchooks.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

120 seconds

Behavioral task

behavioral31

Sample

bin/vncviewer.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

120 seconds

Behavioral task

behavioral32

Sample

bin/vncviewer.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

120 seconds

Report Analysis Logs

General

Target

bin/uvnc_settings.exe
Size

314KB
MD5

b37c19f8d76f58b8ebcb445e594f4d9a
SHA1

51b5a2217e91c8c55e5b77a769f38ea4a846a87b
SHA256

b8be90b283498091e0b9ab8e7d90616306d7d9dd2514630b2fb2b4f391886d9b
SHA512

bc646beea9c7179cd974a7f5427face625c84c353a3f2b98041184543210ae4f4d23f92be505a327bc1f7788dce43329604432b9aac65416f88f3cd6565ec62c
SSDEEP

6144:RWB2T5zB+zMAwEiF8OQm447OZe5Zc7Iksx9CHP++py:RWB294peQmeZejc7vC

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\bin\uvnc_settings.exe
"C:\Users\Admin\AppData\Local\Temp\bin\uvnc_settings.exe"
1⤵
PID:968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\bin\ultravnc.ini

Filesize
838B

MD5
600148198dd2195aa6591bbd52d16c86

SHA1
4831ef86bf7aad3e93486d917dc633963872c160

SHA256
be32ae77584c907047d29f104821101e4038e89a5be5a17a3f745e4fbde9e040

SHA512
02b73ea65ecf69652024b9737dfa76423c06cba89e8a0b8f84f84ff38d1f81b7bb2e1912723f52676732b3686ac2a9f6c5d2c35ebfc256b4e506316802593ed7

Download Submit

© 2018-2024

Terms | Privacy