General
- Target RevoUPort.exe
- Size 204KB
- Sample260823-wcqwpstvgv
- SHA256 e873f2a974ce93740358eb5523575e943bc67c973bec4fe6855c92ebfbbebf32
- MD5 a364104fd9965fa4907d219cfa7bfafb
- SHA1 dc674796b8843f63c1cd50f99d586b857fcdd044
- SHA512 78bda5bd9793bae91c9a0939ed1d748cbe8bb225f09bd970578553cde52a9bc2f08814ef5c765dc9c852b29dbea37cc8ffc90c24bb0f1f471e662351aa0c0710
- SSDEEP 3072:lkLnAdeRbvAZpoKIIn9xg//XHTfq2M0W30L/OHQ4HFs3qMGrfv8Rx/:CLAoYZCIn9SzsFwWc
- TLSH T1C414CF47AB60D83AC8066E709DE2CC9A6679BC213FA10E9B310D72778B313477D5E25D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RevoUPort.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
RevoUPort.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target RevoUPort.exe
- Size 204KB
- SHA256 e873f2a974ce93740358eb5523575e943bc67c973bec4fe6855c92ebfbbebf32
- MD5 a364104fd9965fa4907d219cfa7bfafb
- SHA1 dc674796b8843f63c1cd50f99d586b857fcdd044
- SHA512 78bda5bd9793bae91c9a0939ed1d748cbe8bb225f09bd970578553cde52a9bc2f08814ef5c765dc9c852b29dbea37cc8ffc90c24bb0f1f471e662351aa0c0710
- SSDEEP 3072:lkLnAdeRbvAZpoKIIn9xg//XHTfq2M0W30L/OHQ4HFs3qMGrfv8Rx/:CLAoYZCIn9SzsFwWc
- TLSH T1C414CF47AB60D83AC8066E709DE2CC9A6679BC213FA10E9B310D72778B313477D5E25D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
2System Information Discovery
2System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1