General
- Target JEA REVENANT ONESHOT.zip
- Size 319.3MB
- Sample260813-kh77dsvgpe
- SHA256 fb6ce8196f32cf8ddde0aa266d98615fb1800e99436263cdac44b16b86c577d4
- MD5 90cd5cbd32ce290b56249f2f1f7803e6
- SHA1 d4bb8d317a370298e872e40a8a7ccf2232af702d
- SHA512 9c9fbede1e67f1c9fe0ebd213e3f260a767ce909fbd31bf870ab791aa12d2846f64a6a3c079bc86c3fb397dc43970033b05353912bf124f4f82ebfa2d09ed179
- SSDEEP 6291456:r/UmiLROgdAq+z6GG2kzDqHzDqHzDqHzDwzDqHzDqHzDqHzDs:gnLnPGG2kz+Hz+Hz+Hzcz+Hz+Hz+HzI
- TLSH T18CF833D2F2D360A0F123971C15629D04D679A2B8A78A078BBEBEDC91F5DD06D0D67F02
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Revenant Oneshot.exe
Resource
win10ltsc2021-20260513-en
11 signatures
900 seconds
Behavioral task
behavioral2
Sample
lime.dll
Resource
win10ltsc2021-20260513-en
0 signatures
900 seconds
Malware Config
Targets
-
- Target Revenant Oneshot.exe
- Size 312.9MB
- SHA256 8eee799163b6d2463ea778ec8cb5c6a27bd285644d25c0bc792a5d4ebcbcb46e
- MD5 82c0057d5793af4b58c5753a304e989e
- SHA1 38d74234bc0f0c8841431dc9c53acdf5fb8b509d
- SHA512 018a048024bc7979cf202e790ee0e30a0026b576122321afeaebe39d23682a4b0984b701e0536821dd9b3c577e9e7dd6944612c882e664ce1d40bf18af94b562
- SSDEEP 3145728:PohSAohSAohSAohSMohSAohSAohSAohS:Pmmmmmmm
- TLSH T1ECF8E08B66A4C0C0C969E03E9B67B626EAB2794447305BCF05B147426F739E05E7FB70
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
-
- Target lime.ndll
- Size 8.3MB
- SHA256 858d59373224cb0e3cc5a96799e8a6da1eb31b510975fcae7bad87aac12543cc
- MD5 89cd5afb7e0f19433882f8105b3eca32
- SHA1 c8928e271ee6a73e854b01f84e50ce1a9f834d37
- SHA512 0856afeee79492d09c37bddc66a48ba06c2e247400831a1cbd6569e46278eda6abde7d972f7145e6c2711350d2ce8c8e0b4ad00602d9cd60fac2214bbd1ada1e
- SSDEEP 98304:DeLsNkpEwVcJuKdb2vhWl/LHCsAxmHHBhOibIA1E8:DssNkGwVMdb2wDZA8Bh
- TLSH T129969E0AB2A504E9D6B78138C957A617E771785C03F157FB369056EA3F23BE03A3A710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
2Credentials from Web Browsers
1Windows Credential Manager
1Unsecured Credentials
1Credentials In Files
1