General
-
Target
a0b6739cf311c6bb3f5a45a52ba93ad6fc4d46619e6088f09a7dca4ed00cf88c.exe
-
Size
905KB
-
Sample
241226-vb22xa1nhj
-
MD5
8738df8e1d9e013b4e870fe2f8d6c85a
-
SHA1
8824ca9ff9b34945f6874049f684cd6f549ef50c
-
SHA256
a0b6739cf311c6bb3f5a45a52ba93ad6fc4d46619e6088f09a7dca4ed00cf88c
-
SHA512
392ecdaf4afd0488e60abf4d66e1c369bbcce6035f9d36ed7514011c80e28adc56c43aa95f954de60295eadf72162a9b4a1aa8f4c1ca894252a4639c6b342eda
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa51:gh+ZkldoPK8YaKG1
Static task
static1
Behavioral task
behavioral1
Sample
a0b6739cf311c6bb3f5a45a52ba93ad6fc4d46619e6088f09a7dca4ed00cf88c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a0b6739cf311c6bb3f5a45a52ba93ad6fc4d46619e6088f09a7dca4ed00cf88c.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
a0b6739cf311c6bb3f5a45a52ba93ad6fc4d46619e6088f09a7dca4ed00cf88c.exe
-
Size
905KB
-
MD5
8738df8e1d9e013b4e870fe2f8d6c85a
-
SHA1
8824ca9ff9b34945f6874049f684cd6f549ef50c
-
SHA256
a0b6739cf311c6bb3f5a45a52ba93ad6fc4d46619e6088f09a7dca4ed00cf88c
-
SHA512
392ecdaf4afd0488e60abf4d66e1c369bbcce6035f9d36ed7514011c80e28adc56c43aa95f954de60295eadf72162a9b4a1aa8f4c1ca894252a4639c6b342eda
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa51:gh+ZkldoPK8YaKG1
Score10/10-
Revengerat family
-
Drops startup file
-
Suspicious use of SetThreadContext
-