General
-
Target
RE4T (1).zip
-
Size
163KB
-
Sample
241127-lpfldsyjew
-
MD5
93a9848e55caf405f0f155cef5303ac0
-
SHA1
7c5553cf54749f99c8d2afe403a8f61b8318965a
-
SHA256
ad1ee56c283fb3af21c4f2e92b7d5d4e41e6513fcb2cc5daf143cb75d79fb6d4
-
SHA512
2c3e71a6c80b7c5cbced625c15af9c2c08acec82abb68be9e0ff5734a765014f3ac68dad0cdec10fe31c02938cbe7c5a7c2342dbca5fc2873733c13efde09968
-
SSDEEP
3072:1hN85v3qwrLKkB0XL4Qhs0xlKyXadzaSPQcAK+4F0D762nmiyVcccvbnpn6a:/N85CkKkB09BxlLXadOgQcA4Fy761cce
Static task
static1
Behavioral task
behavioral1
Sample
RE4T Folder/RE4T.lnk
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
RE4T Folder/RE4T.lnk
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
RE4T Folder/bin/msgbox.vbs
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
RE4T Folder/bin/msgbox.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
RE4T Folder/bin/reatcommands.bat
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
RE4T Folder/bin/reatcommands.bat
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
RE4T Folder/RE4T.lnk
-
Size
2KB
-
MD5
64f856fa76e59967a3bb8eeb93053bc6
-
SHA1
fbba2b429bdf129e0a6c3773f0eb03edde31572e
-
SHA256
004f367e84b905a1b10b1efe99bc06416037e008df1b5fc522e8fbdfc4be436f
-
SHA512
a51f867c3d24cac189e88212a0eb1bf502d28d0fe0ad1bc15561cbfdde9e88b423ea4608a328667aeb7d6d75051369e3329fd90c549640cfc837a46361ab74c4
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
RE4T Folder/bin/msgbox.vbs
-
Size
43B
-
MD5
c9922e4e92e078425cb3930c786dab65
-
SHA1
b5e10fe22cc84baf1cd367d1ce0356cb7bfdabe8
-
SHA256
dbcc23257f4327e7ee39ae2a3723d896f05edd52b13bfab78a73dc202abfd872
-
SHA512
a2792c96c59077a88d5978ec56b86d9aa8848be97dc93b5c4d39a6674a18be16cffbf6f0c29b85eed3094111ccfbf5731c551de9e4d0106e61ca116c64dcf0f5
Score1/10 -
-
-
Target
RE4T Folder/bin/reatcommands.bat
-
Size
2KB
-
MD5
122906d25ccc0da20a03c1781d397357
-
SHA1
9ae5221b938123b79b852d40607703ad48bd8885
-
SHA256
77f273ed8e612d9df5ce5c55261bd279d528699274373093cf302c765aca2a65
-
SHA512
1e40def2b860f6394f901d7cbcf54c402531e9952f9ef6338ec0e8c870f3b83e4787f3051c4d3fe7eab9a5e25465158977114409e03f053057771778dac842ac
Score1/10 -