General
-
Target
70fc6fd98f6e1cefb89054b20a5187081a0bd57c4615e86e28707f80d3ca501f.exe
-
Size
904KB
-
Sample
241201-sh9dfsvjbs
-
MD5
28f9f6e25ad74526674523f71bd7d7f4
-
SHA1
49684ac5432df5a4ffe9bab6895481242317def5
-
SHA256
70fc6fd98f6e1cefb89054b20a5187081a0bd57c4615e86e28707f80d3ca501f
-
SHA512
4d7847bd771674fba98e26f9fb13f7e3b728bf191915cfadb005590f81aa102d188eae26b9e156d734dc568f72a79565a8b74223952267a633c27dc053a1dc23
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa58:gh+ZkldoPK8YaKG8
Static task
static1
Behavioral task
behavioral1
Sample
70fc6fd98f6e1cefb89054b20a5187081a0bd57c4615e86e28707f80d3ca501f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
70fc6fd98f6e1cefb89054b20a5187081a0bd57c4615e86e28707f80d3ca501f.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
70fc6fd98f6e1cefb89054b20a5187081a0bd57c4615e86e28707f80d3ca501f.exe
-
Size
904KB
-
MD5
28f9f6e25ad74526674523f71bd7d7f4
-
SHA1
49684ac5432df5a4ffe9bab6895481242317def5
-
SHA256
70fc6fd98f6e1cefb89054b20a5187081a0bd57c4615e86e28707f80d3ca501f
-
SHA512
4d7847bd771674fba98e26f9fb13f7e3b728bf191915cfadb005590f81aa102d188eae26b9e156d734dc568f72a79565a8b74223952267a633c27dc053a1dc23
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa58:gh+ZkldoPK8YaKG8
Score10/10-
Revengerat family
-
Drops startup file
-
Suspicious use of SetThreadContext
-