General
-
Target
a19c6f3461b254fcbe050ff6a115ed69f0a43c9447e6569fa2bef3f6658b6c8b.exe
-
Size
905KB
-
Sample
241219-bmdc5szphx
-
MD5
f2c4eb24189373ad98e7e10d9ec03507
-
SHA1
cdaed7a8ae1d8032f0ae6ce3922fd42b5d244cf2
-
SHA256
a19c6f3461b254fcbe050ff6a115ed69f0a43c9447e6569fa2bef3f6658b6c8b
-
SHA512
fe2a00acbcbc7671c88dddea3cd01c08b629a61c795e7bc03d7aa6d1c70eb0c12ee5a11845a4023374306dbdc184f556963d7e333fe892e6f4b2512e56d3096f
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5e:gh+ZkldoPK8YaKGe
Static task
static1
Behavioral task
behavioral1
Sample
a19c6f3461b254fcbe050ff6a115ed69f0a43c9447e6569fa2bef3f6658b6c8b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a19c6f3461b254fcbe050ff6a115ed69f0a43c9447e6569fa2bef3f6658b6c8b.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
a19c6f3461b254fcbe050ff6a115ed69f0a43c9447e6569fa2bef3f6658b6c8b.exe
-
Size
905KB
-
MD5
f2c4eb24189373ad98e7e10d9ec03507
-
SHA1
cdaed7a8ae1d8032f0ae6ce3922fd42b5d244cf2
-
SHA256
a19c6f3461b254fcbe050ff6a115ed69f0a43c9447e6569fa2bef3f6658b6c8b
-
SHA512
fe2a00acbcbc7671c88dddea3cd01c08b629a61c795e7bc03d7aa6d1c70eb0c12ee5a11845a4023374306dbdc184f556963d7e333fe892e6f4b2512e56d3096f
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5e:gh+ZkldoPK8YaKGe
Score10/10-
Revengerat family
-
Drops startup file
-
Suspicious use of SetThreadContext
-