General
-
Target
c8eb205d613b6796b28d92866dc979e5ef9af0770643c4a4437e84be477974f2N.exe
-
Size
905KB
-
Sample
250124-g65vdsvjd1
-
MD5
6ffd67bef71ed5b25c356fe50b2631f0
-
SHA1
155f3a53c8f0b3ef862e342a30f993bdc24ba8bb
-
SHA256
c8eb205d613b6796b28d92866dc979e5ef9af0770643c4a4437e84be477974f2
-
SHA512
2d150e97030946dee486f15b172a4c6435d1a4814804e9a9226464f17b3814de08dad9ae697863abc41dba605e1bf7fd5fb019d8f80d577cedbc40cd63e0af86
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5N:gh+ZkldoPK8YaKGN
Static task
static1
Behavioral task
behavioral1
Sample
c8eb205d613b6796b28d92866dc979e5ef9af0770643c4a4437e84be477974f2N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
c8eb205d613b6796b28d92866dc979e5ef9af0770643c4a4437e84be477974f2N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
c8eb205d613b6796b28d92866dc979e5ef9af0770643c4a4437e84be477974f2N.exe
-
Size
905KB
-
MD5
6ffd67bef71ed5b25c356fe50b2631f0
-
SHA1
155f3a53c8f0b3ef862e342a30f993bdc24ba8bb
-
SHA256
c8eb205d613b6796b28d92866dc979e5ef9af0770643c4a4437e84be477974f2
-
SHA512
2d150e97030946dee486f15b172a4c6435d1a4814804e9a9226464f17b3814de08dad9ae697863abc41dba605e1bf7fd5fb019d8f80d577cedbc40cd63e0af86
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5N:gh+ZkldoPK8YaKGN
Score10/10-
Revengerat family
-
Drops startup file
-
Suspicious use of SetThreadContext
-