General
-
Target
9a2fcf99caf8e8b9a55fba73084d0f046321e8792af64086adee16699be60e10.exe
-
Size
904KB
-
Sample
241203-cfr4dstqfv
-
MD5
6b7a54b555ea343ce5967097e07c9f9d
-
SHA1
74c966fb1986beb76b4fd1bd96399d5c4174fddf
-
SHA256
9a2fcf99caf8e8b9a55fba73084d0f046321e8792af64086adee16699be60e10
-
SHA512
8685326c28128fba67fbbc0b7d1efe64da68f266b4e25370ebf83cbf8898472826b11aa3b7d4485eb46d475cbd8d0c70ba9e60f81435f3a9388ee2ddb4653041
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5L:gh+ZkldoPK8YaKGL
Static task
static1
Behavioral task
behavioral1
Sample
9a2fcf99caf8e8b9a55fba73084d0f046321e8792af64086adee16699be60e10.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9a2fcf99caf8e8b9a55fba73084d0f046321e8792af64086adee16699be60e10.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
9a2fcf99caf8e8b9a55fba73084d0f046321e8792af64086adee16699be60e10.exe
-
Size
904KB
-
MD5
6b7a54b555ea343ce5967097e07c9f9d
-
SHA1
74c966fb1986beb76b4fd1bd96399d5c4174fddf
-
SHA256
9a2fcf99caf8e8b9a55fba73084d0f046321e8792af64086adee16699be60e10
-
SHA512
8685326c28128fba67fbbc0b7d1efe64da68f266b4e25370ebf83cbf8898472826b11aa3b7d4485eb46d475cbd8d0c70ba9e60f81435f3a9388ee2ddb4653041
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5L:gh+ZkldoPK8YaKGL
Score10/10-
Revengerat family
-
Drops startup file
-
Suspicious use of SetThreadContext
-