General
- Target AR-RevBouncer+V1.4.exe
- Size 149KB
- Sample260810-t244hsdk2t
- SHA256 5de6ee291b5f6a32e2aef959875553f4b714abf45509d9cacc06d8d693a63c2f
- MD5 5325ac231fdd3b4d664f377e292746f0
- SHA1 7e051daa75f8e943f50d7bdefbdbd1a3b020c760
- SHA512 6be4e412f25a121d547e1638e18a262c6335b28062a7f6a5f5bfe5685285ffabf8c46b7bebeb65ccbe8a31b67745501c283f626566b303a7876a07142c70c954
- SSDEEP 768:rbek1QC8Ji27brjpDPMH515LxTpNNFkHdPp5FmOdlW+lt8QfY9Sbh9SbUiJb:/PQzjQLxPkHdPpdzXT8QYC
- TLSH T1A6E3D5139ADC7CD7C13857B0777B83D5CB2EDCA596A1D08EA6C00A92D87C4977A223C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AR-RevBouncer+V1.4.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
AR-RevBouncer+V1.4.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target AR-RevBouncer+V1.4.exe
- Size 149KB
- SHA256 5de6ee291b5f6a32e2aef959875553f4b714abf45509d9cacc06d8d693a63c2f
- MD5 5325ac231fdd3b4d664f377e292746f0
- SHA1 7e051daa75f8e943f50d7bdefbdbd1a3b020c760
- SHA512 6be4e412f25a121d547e1638e18a262c6335b28062a7f6a5f5bfe5685285ffabf8c46b7bebeb65ccbe8a31b67745501c283f626566b303a7876a07142c70c954
- SSDEEP 768:rbek1QC8Ji27brjpDPMH515LxTpNNFkHdPp5FmOdlW+lt8QfY9Sbh9SbUiJb:/PQzjQLxPkHdPpdzXT8QYC
- TLSH T1A6E3D5139ADC7CD7C13857B0777B83D5CB2EDCA596A1D08EA6C00A92D87C4977A223C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.