General
-
Target
70392cef7c6a7239524daebcfcf8ec5ee9ddcbd1f05cdd1149fd103bdd805163.exe
-
Size
905KB
-
Sample
250124-jnhm9ayqdr
-
MD5
677f12f2333d53673966837745eefe50
-
SHA1
b2711bbfcf235efeea3aee16121aa024bace8ac0
-
SHA256
70392cef7c6a7239524daebcfcf8ec5ee9ddcbd1f05cdd1149fd103bdd805163
-
SHA512
ee7482a3d248a49b7d355271f177b4387273ff467942452bb3b2a0a594a3936627d7f0952ecfe49f5d1181a898387d014e1b053964a0c15f9ef21414b8eafa83
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5s:gh+ZkldoPK8YaKGs
Static task
static1
Behavioral task
behavioral1
Sample
70392cef7c6a7239524daebcfcf8ec5ee9ddcbd1f05cdd1149fd103bdd805163.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70392cef7c6a7239524daebcfcf8ec5ee9ddcbd1f05cdd1149fd103bdd805163.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
70392cef7c6a7239524daebcfcf8ec5ee9ddcbd1f05cdd1149fd103bdd805163.exe
-
Size
905KB
-
MD5
677f12f2333d53673966837745eefe50
-
SHA1
b2711bbfcf235efeea3aee16121aa024bace8ac0
-
SHA256
70392cef7c6a7239524daebcfcf8ec5ee9ddcbd1f05cdd1149fd103bdd805163
-
SHA512
ee7482a3d248a49b7d355271f177b4387273ff467942452bb3b2a0a594a3936627d7f0952ecfe49f5d1181a898387d014e1b053964a0c15f9ef21414b8eafa83
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5s:gh+ZkldoPK8YaKGs
Score10/10-
Revengerat family
-
Drops startup file
-
Suspicious use of SetThreadContext
-