General
-
Target
ecc360ddce51949c894b2abed971fb2802f97a72149b9c3db2808119cd5e5b2c.exe
-
Size
905KB
-
Sample
250112-kzdn4sxrgn
-
MD5
ea7d533d92a38efb49c4469e7f7246a5
-
SHA1
0e96242d240449df908b773cdb6b7341939353e0
-
SHA256
ecc360ddce51949c894b2abed971fb2802f97a72149b9c3db2808119cd5e5b2c
-
SHA512
6cbe05f218c291b9e0f7fe73a78a85ea16af6fe8e09afc81e5681812260bd93d9aed19551f72ca978f935121371c8726d30268933844b1bd1be7dd8071ac9770
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5x:gh+ZkldoPK8YaKGx
Static task
static1
Behavioral task
behavioral1
Sample
ecc360ddce51949c894b2abed971fb2802f97a72149b9c3db2808119cd5e5b2c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ecc360ddce51949c894b2abed971fb2802f97a72149b9c3db2808119cd5e5b2c.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
ecc360ddce51949c894b2abed971fb2802f97a72149b9c3db2808119cd5e5b2c.exe
-
Size
905KB
-
MD5
ea7d533d92a38efb49c4469e7f7246a5
-
SHA1
0e96242d240449df908b773cdb6b7341939353e0
-
SHA256
ecc360ddce51949c894b2abed971fb2802f97a72149b9c3db2808119cd5e5b2c
-
SHA512
6cbe05f218c291b9e0f7fe73a78a85ea16af6fe8e09afc81e5681812260bd93d9aed19551f72ca978f935121371c8726d30268933844b1bd1be7dd8071ac9770
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5x:gh+ZkldoPK8YaKGx
Score10/10-
Revengerat family
-
Drops startup file
-
Suspicious use of SetThreadContext
-